CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 15/05/2024 |
| CVE-2024-4568 | MEDIO5.5 | In Xpdf 4.05 (and earlier), a PDF object loop in the PDF resources leads to infinite recursion and a stack overflow. | 06/05/2024 |
| CVE-2024-4141 | MEDIO5.5 | Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid character code in a Type 1 font. The root problem was a bounds check that was being optimized away by modern compilers.
| 24/04/2024 |
| CVE-2024-3900 | MEDIO5.5 | Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by long Unicode sequence in ActualText.
| 17/04/2024 |
| CVE-2024-3248 | MEDIO5.5 | In Xpdf 4.05 (and earlier), a PDF object loop in the attachments leads to infinite recursion and a stack overflow.
| 02/04/2024 |
| CVE-2024-3247 | MEDIO5.5 | In Xpdf 4.05 (and earlier), a PDF object loop in an object stream leads to infinite recursion and a stack overflow.
| 02/04/2024 |
| CVE-2024-2971 | MEDIO5.5 | Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file.
| 26/03/2024 |
| CVE-2022-48545 | MEDIO5.5 | An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02. | 22/08/2023 |
| CVE-2023-3436 | BASSO3.3 | Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream.
| 27/06/2023 |
| CVE-2023-3044 | BASSO3.3 | An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdf's text extraction code.
This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate.
| 02/06/2023 |
| CVE-2023-2664 | MEDIO5.5 | In Xpdf 4.04 (and earlier), a PDF object loop in the embedded file tree leads to infinite recursion and a stack overflow.
| 11/05/2023 |
| CVE-2023-2663 | MEDIO5.5 | In Xpdf 4.04 (and earlier), a PDF object loop in the page label tree leads to infinite recursion and a stack overflow.
| 11/05/2023 |
| CVE-2023-2662 | MEDIO5.5 | In Xpdf 4.04 (and earlier), a bad color space object in the input PDF file can cause a divide-by-zero.
| 11/05/2023 |
| CVE-2023-26930 | MEDIO5.5 | Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. NOTE: Vendor states “it's an expected abort on out-of-memory error.” | 26/04/2023 |
| CVE-2022-45587 | MEDIO5.5 | Stack overflow vulnerability in function gmalloc in goo/gmem.cc in xpdf 4.04, allows local attackers to cause a denial of service. | 15/02/2023 |
| CVE-2022-45586 | MEDIO5.5 | Stack overflow vulnerability in function Dict::find in xpdf/Dict.cc in xpdf 4.04, allows local attackers to cause a denial of service. | 15/02/2023 |
| CVE-2021-36493 | ALTO7.5 | Buffer Overflow vulnerability in pdfimages in xpdf 4.03 allows attackers to crash the application via crafted command. | 03/02/2023 |