CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-2971 – Out-of-bounds array access due to negative object numbers in indirect references in Xpdf 4.05
https://notcve.org/view.php?id=CVE-2024-2971
26 Mar 2024 — Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file. Escritura de matriz fuera de los límites en Xpdf 4.05 y versiones anteriores, provocada por un número de objeto negativo en una referencia indirecta en el archivo PDF de entrada. • https://www.xpdfreader.com/security-bug/CVE-2024-2971.html • CWE-787: Out-of-bounds Write •
CVSS: 3.3EPSS: 0%CPEs: 1EXPL: 1CVE-2023-3044 – Divide-by-zero in Xpdf 4.04 due to very large page size
https://notcve.org/view.php?id=CVE-2023-3044
02 Jun 2023 — An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdf's text extraction code. This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate. Multiple vulnerabilities have been found in Xpdf, the worst of which could result in denial of service. Versions greater than or equal to 4.05 are affected. • https://github.com/baker221/poc-xpdf • CWE-369: Divide By Zero •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1CVE-2023-2664 – Stack overflow in Xpdf 4.04 due to object loop in PDF embedded file tree
https://notcve.org/view.php?id=CVE-2023-2664
11 May 2023 — In Xpdf 4.04 (and earlier), a PDF object loop in the embedded file tree leads to infinite recursion and a stack overflow. Multiple vulnerabilities have been found in Xpdf, the worst of which could result in denial of service. Versions greater than or equal to 4.05 are affected. • https://forum.xpdfreader.com/viewtopic.php?t=42422 • CWE-674: Uncontrolled Recursion •
CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 1CVE-2023-2663 – Stack overflow in Xpdf 4.04 due to object loop in PDF page label tree
https://notcve.org/view.php?id=CVE-2023-2663
11 May 2023 — In Xpdf 4.04 (and earlier), a PDF object loop in the page label tree leads to infinite recursion and a stack overflow. Multiple vulnerabilities have been found in Xpdf, the worst of which could result in denial of service. Versions greater than or equal to 4.05 are affected. • https://forum.xpdfreader.com/viewtopic.php?t=42421 • CWE-674: Uncontrolled Recursion •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1CVE-2023-2662 – Divide-by-zero in Xpdf 4.04 due to bad color space object
https://notcve.org/view.php?id=CVE-2023-2662
11 May 2023 — In Xpdf 4.04 (and earlier), a bad color space object in the input PDF file can cause a divide-by-zero. Multiple vulnerabilities have been found in Xpdf, the worst of which could result in denial of service. Versions greater than or equal to 4.05 are affected. • https://forum.xpdfreader.com/viewtopic.php?t=42505 • CWE-369: Divide By Zero •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 2CVE-2022-38334 – Gentoo Linux Security Advisory 202409-25
https://notcve.org/view.php?id=CVE-2022-38334
15 Sep 2022 — XPDF v4.04 and earlier was discovered to contain a stack overflow via the function Catalog::countPageTree() at Catalog.cc. Se ha descubierto que XPDF v4.04 y anteriores contienen un desbordamiento de pila a través de la función Catalog::countPageTree() en Catalog.cc Multiple vulnerabilities have been found in Xpdf, the worst of which could result in denial of service. Versions greater than or equal to 4.05 are affected. • https://forum.xpdfreader.com/viewtopic.php?f=3&t=42122 • CWE-674: Uncontrolled Recursion •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-38238
https://notcve.org/view.php?id=CVE-2022-38238
16 Aug 2022 — XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::lookChar() at /xpdf/Stream.cc. Se ha detectado que el commit ffaf11c de XPDF contenía un desbordamiento del búfer de la pila por medio de la función DCTStream::lookChar() en el archivo /xpdf/Stream.cc. • https://github.com/jhcloos/xpdf/issues/15 • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-38237
https://notcve.org/view.php?id=CVE-2022-38237
16 Aug 2022 — XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readScan() at /xpdf/Stream.cc. Se ha detectado que el commit ffaf11c de XPDF contenía un desbordamiento del búfer de la pila por medio de la función DCTStream::readScan() en el archivo /xpdf/Stream.cc. • https://github.com/jhcloos/xpdf/issues/14 • CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-38236
https://notcve.org/view.php?id=CVE-2022-38236
16 Aug 2022 — XPDF commit ffaf11c was discovered to contain a global-buffer overflow via Lexer::getObj(Object*) at /xpdf/Lexer.cc. Se ha detectado que el commit ffaf11c de XPDF contenía un desbordamiento del búfer global por medio de la función Lexer::getObj(Object*) en el archivo /xpdf/Lexer.cc. • https://github.com/jhcloos/xpdf/issues/8 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1CVE-2022-38235
https://notcve.org/view.php?id=CVE-2022-38235
16 Aug 2022 — XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar() at /xpdf/Stream.cc. Se ha detectado que el commit ffaf11c de XPDF contenía una violación de la segmentación por medio de la función DCTStream::getChar() en el archivo /xpdf/Stream.cc. • https://github.com/jhcloos/xpdf/issues/5 • CWE-754: Improper Check for Unusual or Exceptional Conditions •