CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 15/05/2024 |
| CVE-2024-4568 | 中危5.5 | In Xpdf 4.05 (and earlier), a PDF object loop in the PDF resources leads to infinite recursion and a stack overflow. | 06/05/2024 |
| CVE-2024-4141 | 中危5.5 | Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid character code in a Type 1 font. The root problem was a bounds check that was being optimized away by modern compilers.
| 24/04/2024 |
| CVE-2024-3900 | 中危5.5 | Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by long Unicode sequence in ActualText.
| 17/04/2024 |
| CVE-2024-3248 | 中危5.5 | In Xpdf 4.05 (and earlier), a PDF object loop in the attachments leads to infinite recursion and a stack overflow.
| 02/04/2024 |
| CVE-2024-3247 | 中危5.5 | In Xpdf 4.05 (and earlier), a PDF object loop in an object stream leads to infinite recursion and a stack overflow.
| 02/04/2024 |
| CVE-2024-2971 | 中危5.5 | Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file.
| 26/03/2024 |
| CVE-2022-48545 | 中危5.5 | An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02. | 22/08/2023 |
| CVE-2023-3436 | 低危3.3 | Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream.
| 27/06/2023 |
| CVE-2023-3044 | 低危3.3 | An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdf's text extraction code.
This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate.
| 02/06/2023 |
| CVE-2023-2664 | 中危5.5 | In Xpdf 4.04 (and earlier), a PDF object loop in the embedded file tree leads to infinite recursion and a stack overflow.
| 11/05/2023 |
| CVE-2023-2663 | 中危5.5 | In Xpdf 4.04 (and earlier), a PDF object loop in the page label tree leads to infinite recursion and a stack overflow.
| 11/05/2023 |
| CVE-2023-2662 | 中危5.5 | In Xpdf 4.04 (and earlier), a bad color space object in the input PDF file can cause a divide-by-zero.
| 11/05/2023 |
| CVE-2023-26930 | 中危5.5 | Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. NOTE: Vendor states “it's an expected abort on out-of-memory error.” | 26/04/2023 |
| CVE-2022-45587 | 中危5.5 | Stack overflow vulnerability in function gmalloc in goo/gmem.cc in xpdf 4.04, allows local attackers to cause a denial of service. | 15/02/2023 |
| CVE-2022-45586 | 中危5.5 | Stack overflow vulnerability in function Dict::find in xpdf/Dict.cc in xpdf 4.04, allows local attackers to cause a denial of service. | 15/02/2023 |
| CVE-2021-36493 | 高危7.5 | Buffer Overflow vulnerability in pdfimages in xpdf 4.03 allows attackers to crash the application via crafted command. | 03/02/2023 |