| CVE-2021-40226 | ALTO7.5 | xpdfreader 4.03 is vulnerable to Buffer Overflow. | 10/11/2022 |
| CVE-2022-24107 | ALTO7.8 | Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc. | 30/08/2022 |
| CVE-2022-24106 | ALTO7.8 | In Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the image, leading to an unknown integer-related vulnerability in Stream.cc. | 30/08/2022 |
| CVE-2019-17064 | MEDIO5.5 | Catalog.cc in Xpdf 4.02 has a NULL pointer dereference because Catalog.pageLabels is initialized too late in the Catalog constructor. | 01/10/2019 |
| CVE-2019-16115 | ALTO7.8 | In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used by GfxAxialShading::getColor. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It allows an attacker to use a crafted PDF file to cause Denial of Service or po | 08/09/2019 |
| CVE-2019-16088 | MEDIO5.5 | Xpdf 3.04 has a SIGSEGV in XRef::fetch in XRef.cc after many recursive calls to Catalog::countPageTree in Catalog.cc. | 06/09/2019 |
| CVE-2019-15860 | MEDIO5.5 | Xpdf 2.00 allows a SIGSEGV in XRef::constructXRef in XRef.cc. NOTE: 2.00 is a version from November 2002. | 03/09/2019 |
| CVE-2019-14294 | MEDIO5.5 | An issue was discovered in Xpdf 4.01.01. There is a use-after-free in the function JPXStream::fillReadBuf at JPXStream.cc, due to an out of bounds read. | 27/07/2019 |
| CVE-2019-14293 | MEDIO5.5 | An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA!=6 case 2. | 27/07/2019 |
| CVE-2019-14292 | MEDIO5.5 | An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA!=6 case 1. | 27/07/2019 |
| CVE-2019-14291 | MEDIO5.5 | An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA==6 case 3. | 27/07/2019 |
| CVE-2019-14290 | MEDIO5.5 | An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA==6 case 2. | 27/07/2019 |
| CVE-2019-14289 | MEDIO5.5 | An issue was discovered in Xpdf 4.01.01. There is an integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "multiple bytes per line" case. | 27/07/2019 |
| CVE-2019-14288 | ALTO7.8 | An issue was discovered in Xpdf 4.01.01. There is an Integer overflow in the function JBIG2Bitmap::combine at JBIG2Stream.cc for the "one byte per line" case. | 27/07/2019 |
| CVE-2019-13291 | MEDIO5.5 | In Xpdf 4.01.01, there is a heap-based buffer over-read in the function DCTStream::readScan() located at Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It might allow an attacker to cause Information Disclosure. | 04/07/2019 |
| CVE-2019-13289 | ALTO7.8 | In Xpdf 4.01.01, there is a use-after-free vulnerability in the function JBIG2Stream::close() located at JBIG2Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. | 04/07/2019 |
| CVE-2019-13288 | MEDIO5.5 | In Xpdf 4.01.01, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack. This is similar to CVE-2018-16646. | 04/07/2019 |
| CVE-2019-13287 | MEDIO5.5 | In Xpdf 4.01.01, there is an out-of-bounds read vulnerability in the function SplashXPath::strokeAdjust() located at splash/SplashXPath.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure. This is related to CVE-2018-16 | 04/07/2019 |
| CVE-2019-13286 | MEDIO5.5 | In Xpdf 4.01.01, there is a heap-based buffer over-read in the function JBIG2Stream::readTextRegionSeg() located at JBIG2Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure. | 04/07/2019 |
| CVE-2019-13283 | ALTO7.8 | In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in strncpy from FoFiType1::parse in fofi/FoFiType1.cc because it does not ensure the source string has a valid length before making a fixed-length copy. It can, for example, be triggered by sending a crafted PDF document to the pdftotext tool. It allows | 04/07/2019 |