Approved changes feed: RSS · Atom

cpe:2.3:a:xpdfreader:xpdf:4.04:*:*:*:*:*:*:*

part: a version: 4.04 update: *

VendorXpdfreader (ad55fa23-6c7d-5c79-9cd2-81be6f4f6fc0)
ProductXpdf (fa8ac55a-bfef-5aee-a583-678a403d1e25)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/xpdf purl2cpe 2026-06-01 10:10:57.544847
pkg:deb/ubuntu/xpdf purl2cpe 2026-06-01 10:10:57.544848
pkg:github/tmyroadctfig/xpdf purl2cpe 2026-06-01 10:10:57.544849
pkg:rpm/fedora/xpdf purl2cpe 2026-06-01 10:10:57.544851
pkg:rpm/opensuse/xpdf purl2cpe 2026-06-01 10:10:57.544852

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3436 vulnerable 2026-06-08 06:09:39.545257 Deadlock in Xpdf 4.04 due to PDF object stream references
LOW (3.3)
Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream.
Published: 2023-06-27T20:55:21.049Z
Updated: 2024-11-07T17:00:22.993Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26930 vulnerable 2026-06-08 05:57:40.470540 Details available
Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. NOTE: Vendor states “it's an expected abort on out-of-memory error.”
Published: 2023-04-26T00:00:00.000Z
Updated: 2024-08-02T12:01:31.933Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45587 vulnerable 2026-06-08 05:50:36.525086 Details available
Stack overflow vulnerability in function gmalloc in goo/gmem.cc in xpdf 4.04, allows local attackers to cause a denial of service.
Published: 2023-02-15T00:00:00.000Z
Updated: 2025-03-19T17:54:02.032Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45586 vulnerable 2026-06-08 05:50:36.524535 Details available
Stack overflow vulnerability in function Dict::find in xpdf/Dict.cc in xpdf 4.04, allows local attackers to cause a denial of service.
Published: 2023-02-15T00:00:00.000Z
Updated: 2025-03-19T17:55:29.784Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43295 vulnerable 2026-06-08 05:49:31.263907 Details available
XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy() at xpdf/Stream.cc:795.
Published: 2022-11-14T00:00:00.000Z
Updated: 2025-05-13T19:25:16.282Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43071 vulnerable 2026-06-08 05:49:31.102968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41844 vulnerable 2026-06-08 05:49:28.723550 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41843 vulnerable 2026-06-08 05:49:28.722823 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41842 vulnerable 2026-06-08 05:49:28.722196 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38928 vulnerable 2026-06-08 05:47:17.539485 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38222 vulnerable 2026-06-08 05:47:16.049818 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38171 vulnerable 2026-06-08 05:47:15.925546 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36561 vulnerable 2026-06-08 05:46:07.557404 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33108 vulnerable 2026-06-08 05:44:46.230224 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30775 vulnerable 2026-06-08 05:43:39.713610 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.