Xpdf vulnerabilities

Products

• Xpdf 49

Newest

• xpdf Infinite loop in Xpdf due to missing validation in JPEG 2000 decoder CVE-2026-116671 2.1 LowOctober 26, 2026
• xpdf Divide-by-zero in Xpdf 4.06 due to zero-height Type 3 glyph CVE-2026-85458 2.1 LowSeptember 3, 2026
• xpdf Out-of-bounds array write in Xpdf 4.06 due to missing validation CVE-2026-4407 2.1 LowMarch 18, 2026
• xpdf Stack overflow in Xpdf 4.05 due to object loop in PDF CMap CVE-2025-11896 Fix available 2.1 LowOctober 16, 2025
• xpdf Out-of-bounds array write due to invalid VerticesPerRow in Xpdf 4.05 CVE-2025-3154 Fix available 2.1 LowApril 2, 2025
• xpdf Out-of-bounds array write in Xpdf 4.05 due to incorrect integer overflow checking CVE-2025-2574 2.1 LowMarch 20, 2025
• xpdf Uninitialized variable in Xpdf 4.05 due to invalid JPEG header CVE-2024-7868 Fix available 2.1 LowAugust 15, 2024
• xpdf Integer overflow and divide-by-zero in Xpdf 4.05 due to bogus page box coordinates CVE-2024-7867 2.1 LowAugust 15, 2024
• xpdf Stack overflow in Xpdf 4.05 due to object loop in PDF pattern CVE-2024-7866 2.1 LowAugust 15, 2024
• xpdf Out-of-bounds array write in Xpdf 4.05 due to missing object type check CVE-2024-4976 2.1 LowMay 15, 2024
• glyphandcog xpdf Stack overflow in Xpdf 4.05 due to object loop in PDF resources CVE-2024-4568 2.9 LowMay 6, 2024
• xpdf Out-of-bounds array write in Xpdf 4.05 due to incorrect bounds check CVE-2024-4141 Fix available 2.9 LowApril 24, 2024
• xpdf Out-of-bounds stack array write in Xpdf 4.05 due to missing zero check CVE-2024-3900 2.9 LowApril 17, 2024
• xpdf Stack overflow in Xpdf 4.05 due to object loop in attachments CVE-2024-3248 2.9 LowApril 2, 2024
• xpdf Stack overflow in Xpdf 4.05 due to object loop in PDF object stream CVE-2024-3247 2.9 LowApril 2, 2024
• xpdf Out-of-bounds array access due to negative object numbers in indirect references in Xpdf 4.05 CVE-2024-2971 2.9 LowMarch 26, 2024
• xpdf Deadlock in Xpdf 4.04 due to PDF object stream references CVE-2023-3436 Fix available 3.3 LowJune 27, 2023
• xpdf Divide-by-zero in Xpdf 4.04 due to very large page size CVE-2023-3044 Fix available 3.3 LowJune 2, 2023
• xpdf Stack overflow in Xpdf 4.04 due to object loop in PDF embedded file tree CVE-2023-2664 Fix available 2.9 LowMay 11, 2023
• xpdf Stack overflow in Xpdf 4.04 due to object loop in PDF page label tree CVE-2023-2663 Fix available 2.9 LowMay 11, 2023
• xpdf Divide-by-zero in Xpdf 4.04 due to bad color space object CVE-2023-2662 Fix available 2.9 LowMay 11, 2023
• glyph & cog xpdf, fedoraproject fedora +1 more In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to... CVE-2020-25725 Fix available 5.0 MediumNovember 21, 2020
• xpdf xpdf allows remote attackers to cause a denial of service (NULL pointer dereference and crash) in... CVE-2010-0206 Fix available 5.5 MediumOctober 30, 2019
• gnome gpdf, kde kdegraphics, kpdf +1 more +3 more The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics... CVE-2009-4035 Fix available 9.3 HighDecember 21, 2009
• xpdf Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3... CVE-2007-5393 Fix available 9.3 HighNovember 8, 2007
• xpdf Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote... CVE-2007-5392 Fix available 9.3 HighNovember 8, 2007
• xpdf Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3... CVE-2007-4352 Fix available 7.6 HighNovember 8, 2007
• kde, xpdf +1 more The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before... CVE-2007-0104 Fix available 6.8 MediumJanuary 9, 2007
• xpdf Certain patches for kpdf do not include all relevant patches from xpdf that were associated with... CVE-2006-0746 Fix available 7.5 HighMarch 9, 2006
• gnome gpdf, libextractor, xpdf +1 more +3 more Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products... CVE-2006-1244 7.6 HighFebruary 27, 2006
• xpdf Heap-based buffer overflow in Splash.cc in xpdf, as used in other products such as (1) poppler, ... CVE-2006-0301 Fix available 7.5 HighJanuary 30, 2006
• xpdf Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such... CVE-2005-3192 Fix available 7.5 HighDecember 8, 2005
• xpdf Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream:... CVE-2005-3191 Fix available 5.1 MediumDecember 7, 2005
• debian linux, xpdf, ascii ptex +15 more +17 more The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete... CVE-2005-0206 Fix available 7.5 HighFebruary 15, 2005
• xpdf Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in... CVE-2005-3628 Fix available 7.5 HighJanuary 25, 2005
• xpdf Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS,... CVE-2005-3627 Fix available 7.5 HighJanuary 25, 2005
• easy software products cups, kde kpdf, libextractor +24 more +26 more Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and... CVE-2005-3626 Fix available 5.0 MediumJanuary 25, 2005
• easy software products cups, kde kpdf, libextractor +24 more +26 more Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and... CVE-2005-3625 Fix available 10.0 HighJanuary 25, 2005
• easy software products cups, kde kpdf, libextractor +24 more +26 more The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler... CVE-2005-3624 Fix available 5.0 MediumJanuary 25, 2005
• xpdf Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing... CVE-2005-3193 Fix available 5.1 MediumJanuary 25, 2005
• kde kpdf, xpdf +1 more xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to... CVE-2005-2097 Fix available 2.1 LowJanuary 25, 2005
• xpdf Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier... CVE-2005-0064 Fix available 7.5 HighJanuary 19, 2005
• kde, xpdf, easy software products cups +2 more Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that... CVE-2004-1125 Fix available 9.3 HighDecember 22, 2004
• easy software products cups, xpdf, debian linux +10 more +12 more Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow... CVE-2004-0889 Fix available 10.0 HighOctober 26, 2004
• easy software products cups, gnome gpdf, kde +10 more +12 more Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as... CVE-2004-0888 Fix available 10.0 HighOctober 21, 2004
• adobe acrobat, xpdf, mandrakesoft mandrake linux +4 more +6 more Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote attackers to... CVE-2003-0434 Public exploitFix available EPSS 40.9% 7.5 HighJune 18, 2003
• easy software products cups, xpdf +1 more Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18,... CVE-2002-1384 Fix available 7.2 HighJanuary 2, 2003
• xpdf xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a... CVE-2000-0728 7.2 HighOctober 13, 2000
• xpdf xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL... CVE-2000-0727 7.6 HighOctober 13, 2000