CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 15/05/2024 |
| CVE-2024-4568 | 보통5.5 | In Xpdf 4.05 (and earlier), a PDF object loop in the PDF resources leads to infinite recursion and a stack overflow. | 06/05/2024 |
| CVE-2024-4141 | 보통5.5 | Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid character code in a Type 1 font. The root problem was a bounds check that was being optimized away by modern compilers.
| 24/04/2024 |
| CVE-2024-3900 | 보통5.5 | Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by long Unicode sequence in ActualText.
| 17/04/2024 |
| CVE-2024-3248 | 보통5.5 | In Xpdf 4.05 (and earlier), a PDF object loop in the attachments leads to infinite recursion and a stack overflow.
| 02/04/2024 |
| CVE-2024-3247 | 보통5.5 | In Xpdf 4.05 (and earlier), a PDF object loop in an object stream leads to infinite recursion and a stack overflow.
| 02/04/2024 |
| CVE-2024-2971 | 보통5.5 | Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file.
| 26/03/2024 |
| CVE-2022-48545 | 보통5.5 | An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02. | 22/08/2023 |
| CVE-2023-3436 | 낮음3.3 | Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream.
| 27/06/2023 |
| CVE-2023-3044 | 낮음3.3 | An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdf's text extraction code.
This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate.
| 02/06/2023 |
| CVE-2023-2664 | 보통5.5 | In Xpdf 4.04 (and earlier), a PDF object loop in the embedded file tree leads to infinite recursion and a stack overflow.
| 11/05/2023 |
| CVE-2023-2663 | 보통5.5 | In Xpdf 4.04 (and earlier), a PDF object loop in the page label tree leads to infinite recursion and a stack overflow.
| 11/05/2023 |
| CVE-2023-2662 | 보통5.5 | In Xpdf 4.04 (and earlier), a bad color space object in the input PDF file can cause a divide-by-zero.
| 11/05/2023 |
| CVE-2023-26930 | 보통5.5 | Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. NOTE: Vendor states “it's an expected abort on out-of-memory error.” | 26/04/2023 |
| CVE-2022-45587 | 보통5.5 | Stack overflow vulnerability in function gmalloc in goo/gmem.cc in xpdf 4.04, allows local attackers to cause a denial of service. | 15/02/2023 |
| CVE-2022-45586 | 보통5.5 | Stack overflow vulnerability in function Dict::find in xpdf/Dict.cc in xpdf 4.04, allows local attackers to cause a denial of service. | 15/02/2023 |
| CVE-2021-36493 | 높음7.5 | Buffer Overflow vulnerability in pdfimages in xpdf 4.03 allows attackers to crash the application via crafted command. | 03/02/2023 |