Xpdfreader Xpdf
82 CVEs affecting Xpdfreader Xpdf. Latest disclosed: 2024-08-15. Critical: 0, High: 16.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-7868 | High | 8.2 | 2024-08-15 | In Xpdf 4.05 (and earlier), invalid header info in a DCT (JPEG) stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file… |
CVE-2022-38222 | High | 7.8 | 2022-09-29 | There is a use-after-free issue in JBIG2Stream::close() located in JBIG2Stream.cc in Xpdf 4.04. It can be triggered by sending a crafted PDF file to (for examp… |
CVE-2022-38928 | High | 7.8 | 2022-09-21 | XPDF 4.04 is vulnerable to Null Pointer Dereference in FoFiType1C.cc:2393. |
CVE-2022-38171 | High | 7.8 | 2022-08-22 | Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially craft… |
CVE-2022-33108 | High | 7.8 | 2022-06-28 | XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files. |
CVE-2022-30524 | High | 7.8 | 2022-05-09 | There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinat… |
CVE-2021-30860 | High | 7.8 | 2021-08-24 | An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big… |
CVE-2020-24999 | High | 7.8 | 2020-09-03 | There is an invalid memory access in the function fprintf located in Error.cc in Xpdf 4.0.2. It can be triggered by sending a crafted PDF file to the pdftohtml… |
CVE-2020-24996 | High | 7.8 | 2020-09-03 | There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2. It can be triggered by (for example) sending a… |
CVE-2012-2142 | High | 7.8 | 2020-01-09 | The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a ter… |
CVE-2019-9878 | High | 7.8 | 2019-03-21 | There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase() located in GfxState.cc in Xpdf 4.0.0, as used in pdfalto 0.2. It can b… |
CVE-2019-9877 | High | 7.8 | 2019-03-21 | There is an invalid memory access vulnerability in the function TextPage::findGaps() located at TextOutputDev.c in Xpdf 4.01, which can (for example) be trigge… |
CVE-2018-11033 | High | 7.8 | 2018-05-14 | The DCTStream::readHuffSym function in Stream.cc in the DCT decoder in xpdf before 4.00 allows remote attackers to cause a denial of service (application crash… |
CVE-2018-8100 | High | 7.8 | 2018-03-14 | The JPXStream::readTilePart function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer overflow and application cras… |
CVE-2021-36493 | High | 7.5 | 2023-02-03 | Buffer Overflow vulnerability in pdfimages in xpdf 4.03 allows attackers to crash the application via crafted command. |
CVE-2020-35376 | High | 7.5 | 2020-12-26 | Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp() function. |
CVE-2024-7867 | Medium | 6.2 | 2024-08-15 | In Xpdf 4.05 (and earlier), very large coordinates in a page box can cause an integer overflow and divide-by-zero. |
CVE-2024-7866 | Medium | 5.5 | 2024-08-15 | In Xpdf 4.05 (and earlier), a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow. |
CVE-2024-4976 | Medium | 5.5 | 2024-05-15 | Out-of-bounds array write in Xpdf 4.05 and earlier, due to missing object type check in AcroForm field reference. |
CVE-2022-48545 | Medium | 5.5 | 2023-08-22 | An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02. |