Approved changes feed: RSS · Atom
cpe:2.3:a:xpdf:xpdf:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Xpdf (3f1f5eb9-1105-5fd5-b7ed-b2deb89a8bb0) |
|---|---|
| Product | Xpdf (85abe808-54f5-5f70-9161-b238a6233c5a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-4407 |
vulnerable | 2026-06-08 08:05:13.328472 |
Out-of-bounds array write in Xpdf 4.06 due to missing validation
Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces.
Published: 2026-03-18T21:44:36.651Z
Updated: 2026-03-19T14:01:35.168Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-3154 |
vulnerable | 2026-06-08 07:23:08.276181 |
Out-of-bounds array write due to invalid VerticesPerRow in Xpdf 4.05
Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid VerticesPerRow value in a PDF shading dictionary.
Published: 2025-04-02T22:18:46.033Z
Updated: 2025-04-03T19:15:26.279Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2574 |
vulnerable | 2026-06-08 07:16:57.580225 |
Out-of-bounds array write in Xpdf 4.05 due to incorrect integer overflow checking
Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code.
Published: 2025-03-20T21:07:46.499Z
Updated: 2025-10-06T22:32:59.827Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11896 |
vulnerable | 2026-06-08 07:04:29.368723 |
Stack overflow in Xpdf 4.05 due to object loop in PDF CMap
In Xpdf 4.05 (and earlier), a PDF object loop in a CMap, via the "UseCMap" entry, leads to infinite recursion and a stack overflow.
Published: 2025-10-16T21:59:45.136Z
Updated: 2025-10-17T13:49:40.937Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7868 |
vulnerable | 2026-06-08 06:58:23.724251 |
Uninitialized variable in Xpdf 4.05 due to invalid JPEG header
In Xpdf 4.05 (and earlier), invalid header info in a DCT (JPEG) stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file causes a segfault attempting to read from an invalid address.
Published: 2024-08-15T20:22:52.873Z
Updated: 2025-10-06T22:31:57.623Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7867 |
vulnerable | 2026-06-08 06:58:23.723850 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7866 |
vulnerable | 2026-06-08 06:58:23.722303 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4976 |
vulnerable | 2026-06-08 06:52:08.669749 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4568 |
vulnerable | 2026-06-08 06:50:18.173775 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4141 |
vulnerable | 2026-06-08 06:50:17.098059 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3900 |
vulnerable | 2026-06-08 06:43:51.780525 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3248 |
vulnerable | 2026-06-08 06:41:52.775032 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3247 |
vulnerable | 2026-06-08 06:41:52.773600 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2971 |
vulnerable | 2026-06-08 06:35:27.862012 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3436 |
vulnerable | 2026-06-08 06:09:39.545316 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3044 |
vulnerable | 2026-06-08 06:09:38.381902 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2664 |
vulnerable | 2026-06-08 06:02:42.733794 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2663 |
vulnerable | 2026-06-08 06:02:42.733381 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2662 |
vulnerable | 2026-06-08 06:02:42.731477 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0206 |
vulnerable | 2026-06-08 04:51:53.555741 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0746 |
vulnerable | 2026-06-08 04:48:55.129360 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0301 |
vulnerable | 2026-06-08 04:48:53.298969 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3628 |
vulnerable | 2026-06-08 04:48:41.450899 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3627 |
vulnerable | 2026-06-08 04:48:41.450161 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.