Search CVE reports
251 – 260 of 553 results
In Xpdf 4.01.01, there is a heap-based buffer over-read in the function DCTStream::readScan() located at Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It might allow an...
4 affected packages
ipe, libextractor, poppler, xpdf
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ipe | — | — | Not affected | Not affected | Not affected |
| libextractor | — | — | Not affected | Not affected | Not affected |
| poppler | — | — | Not affected | Not affected | Not affected |
| xpdf | — | — | Not affected | Not in release | Not affected |
In Xpdf 4.01.01, there is a use-after-free vulnerability in the function JBIG2Stream::close() located at JBIG2Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool.
4 affected packages
ipe, libextractor, poppler, xpdf
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ipe | — | — | Not affected | Not affected | Not affected |
| libextractor | — | — | Not affected | Not affected | Not affected |
| poppler | — | — | Not affected | Not affected | Not affected |
| xpdf | — | — | Not affected | Not in release | Not affected |
In Xpdf 4.01.01, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack. This is similar to CVE-2018-16646.
4 affected packages
ipe, libextractor, poppler, xpdf
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ipe | — | — | Not affected | Not affected | Not affected |
| libextractor | — | — | Not affected | Not affected | Not affected |
| poppler | — | — | Not affected | Not affected | Not affected |
| xpdf | — | — | Not affected | Not in release | Not affected |
In Xpdf 4.01.01, there is an out-of-bounds read vulnerability in the function SplashXPath::strokeAdjust() located at splash/SplashXPath.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool....
4 affected packages
ipe, libextractor, poppler, xpdf
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ipe | — | — | Not affected | Not affected | Not affected |
| libextractor | — | — | Not affected | Not affected | Not affected |
| poppler | — | — | Not affected | Not affected | Not affected |
| xpdf | — | — | Not affected | Not in release | Not affected |
In Xpdf 4.01.01, there is a heap-based buffer over-read in the function JBIG2Stream::readTextRegionSeg() located at JBIG2Stream.cc. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It might...
4 affected packages
ipe, libextractor, poppler, xpdf
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ipe | — | — | Not affected | Not affected | Not affected |
| libextractor | — | — | Not affected | Not affected | Not affected |
| poppler | — | — | Not affected | Not affected | Not affected |
| xpdf | — | — | Not affected | Not in release | Not affected |
Some fixes available 1 of 8
In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in strncpy from FoFiType1::parse in fofi/FoFiType1.cc because it does not ensure the source string has a valid length before making a fixed-length copy. It can, for...
4 affected packages
ipe, libextractor, poppler, xpdf
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ipe | — | — | Not affected | Not affected | Not affected |
| libextractor | — | — | Not affected | Not affected | Not affected |
| poppler | — | — | Not affected | Not affected | Not affected |
| xpdf | — | — | Not affected | Not in release | Not affected |
In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in SampledFunction::transform in Function.cc when using a large index for samples. It can, for example, be triggered by sending a crafted PDF document to the...
4 affected packages
ipe, libextractor, poppler, xpdf
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ipe | — | — | Not affected | Not affected | Not affected |
| libextractor | — | — | Not affected | Not affected | Not affected |
| poppler | — | — | Not affected | Not affected | Not affected |
| xpdf | — | — | Not affected | Not in release | Not affected |
In Xpdf 4.01.01, a heap-based buffer overflow could be triggered in DCTStream::decodeImage() in Stream.cc when writing to frameBuf memory. It can, for example, be triggered by sending a crafted PDF document to the pdftotext tool....
4 affected packages
ipe, libextractor, poppler, xpdf
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ipe | — | — | Not affected | Not affected | Not affected |
| libextractor | — | — | Not affected | Not affected | Not affected |
| poppler | — | — | Not affected | Not affected | Not affected |
| xpdf | — | — | Not affected | Not in release | Not affected |
Some fixes available 12 of 19
In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in FoFiType1C::convertToType0 in fofi/FoFiType1C.cc when it is trying to access the second privateDicts array element, because the privateDicts array has only one...
4 affected packages
ipe, libextractor, poppler, xpdf
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ipe | — | — | Not affected | Not affected | Not affected |
| libextractor | — | — | Not affected | Not affected | Not affected |
| poppler | — | — | Fixed | Fixed | Fixed |
| xpdf | — | — | Not affected | Not in release | Not affected |
In Xpdf 4.01.01, a buffer over-read could be triggered in FoFiType1C::convertToType1 in fofi/FoFiType1C.cc when the index number is larger than the charset array bounds. It can, for example, be triggered by sending a crafted PDF...
4 affected packages
ipe, libextractor, poppler, xpdf
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| ipe | — | — | Not affected | Not affected | Not affected |
| libextractor | — | — | Not affected | Not affected | Not affected |
| poppler | — | — | Not affected | Not affected | Not affected |
| xpdf | — | — | Not affected | Not in release | Not affected |