CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-48545
https://notcve.org/view.php?id=CVE-2022-48545
22 Aug 2023 — An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02. • https://forum.xpdfreader.com/viewtopic.php?f=3&t=42092 • CWE-674: Uncontrolled Recursion •
CVSS: 3.3EPSS: 0%CPEs: 1EXPL: 1CVE-2023-3044 – Divide-by-zero in Xpdf 4.04 due to very large page size
https://notcve.org/view.php?id=CVE-2023-3044
02 Jun 2023 — An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdf's text extraction code. This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate. Multiple vulnerabilities have been found in Xpdf, the worst of which could result in denial of service. Versions greater than or equal to 4.05 are affected. • https://github.com/baker221/poc-xpdf • CWE-369: Divide By Zero •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1CVE-2023-2664 – Stack overflow in Xpdf 4.04 due to object loop in PDF embedded file tree
https://notcve.org/view.php?id=CVE-2023-2664
11 May 2023 — In Xpdf 4.04 (and earlier), a PDF object loop in the embedded file tree leads to infinite recursion and a stack overflow. Multiple vulnerabilities have been found in Xpdf, the worst of which could result in denial of service. Versions greater than or equal to 4.05 are affected. • https://forum.xpdfreader.com/viewtopic.php?t=42422 • CWE-674: Uncontrolled Recursion •
CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 1CVE-2023-2663 – Stack overflow in Xpdf 4.04 due to object loop in PDF page label tree
https://notcve.org/view.php?id=CVE-2023-2663
11 May 2023 — In Xpdf 4.04 (and earlier), a PDF object loop in the page label tree leads to infinite recursion and a stack overflow. Multiple vulnerabilities have been found in Xpdf, the worst of which could result in denial of service. Versions greater than or equal to 4.05 are affected. • https://forum.xpdfreader.com/viewtopic.php?t=42421 • CWE-674: Uncontrolled Recursion •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1CVE-2023-2662 – Divide-by-zero in Xpdf 4.04 due to bad color space object
https://notcve.org/view.php?id=CVE-2023-2662
11 May 2023 — In Xpdf 4.04 (and earlier), a bad color space object in the input PDF file can cause a divide-by-zero. Multiple vulnerabilities have been found in Xpdf, the worst of which could result in denial of service. Versions greater than or equal to 4.05 are affected. • https://forum.xpdfreader.com/viewtopic.php?t=42505 • CWE-369: Divide By Zero •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 2CVE-2022-38334 – Gentoo Linux Security Advisory 202409-25
https://notcve.org/view.php?id=CVE-2022-38334
15 Sep 2022 — XPDF v4.04 and earlier was discovered to contain a stack overflow via the function Catalog::countPageTree() at Catalog.cc. Se ha descubierto que XPDF v4.04 y anteriores contienen un desbordamiento de pila a través de la función Catalog::countPageTree() en Catalog.cc Multiple vulnerabilities have been found in Xpdf, the worst of which could result in denial of service. Versions greater than or equal to 4.05 are affected. • https://forum.xpdfreader.com/viewtopic.php?f=3&t=42122 • CWE-674: Uncontrolled Recursion •
CVSS: 7.8EPSS: 0%CPEs: 15EXPL: 2CVE-2021-30860 – Apple Multiple Products Integer Overflow Vulnerability
https://notcve.org/view.php?id=CVE-2021-30860
24 Aug 2021 — An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. Se ha solucionado un desbordamiento de enteros con una validación de entrada mejorada. • https://github.com/jeffssh/CVE-2021-30860 • CWE-190: Integer Overflow or Wraparound •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 1CVE-2020-35376 – Gentoo Linux Security Advisory 202405-18
https://notcve.org/view.php?id=CVE-2020-35376
26 Dec 2020 — Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp() function. Xpdf versión 4.02 permite un consumo de la pila debido a una referencia de subrutina incorrecta en una cadena de caracteres fuente Tipo 1C, relacionada con la función FoFiType1C::getOp() Multiple vulnerabilities have been discovered in Xpdf, the worst of which could possibly lead to arbitrary code execution. Versions greater than or equal to 4.04 are affe... • https://forum.xpdfreader.com/viewtopic.php?f=3&t=42066 • CWE-787: Out-of-bounds Write •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 2CVE-2020-25725 – Gentoo Linux Security Advisory 202405-18
https://notcve.org/view.php?id=CVE-2020-25725
21 Nov 2020 — In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to use the freed `t3GlyphStack->cache`, which causes an `heap-use-after-free` problem. The codes of a previous fix for nested Type 3 characters wasn't correctly handling the case where a Type 3 char referred to another char in the same Type 3 font. En Xpdf versión 4.02, la función SplashOutputDev::endType3Char(GfxState *state) en el archivo SplashOutputDev.cc:3079, está tratando de usar "t3GlyphStack-)cache", el l... • https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25725 • CWE-416: Use After Free •