Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

xpdf — Vulnerabilities & Security Advisories 21

All 21 CVE vulnerabilities found in xpdf, with AI-generated Chinese analysis, references, and POCs.

This page presents vulnerability aggregation data for the xpdf product, focusing on common weakness types and associated security tags managed by the upstream vendors. It compiles a comprehensive list of reported security flaws, ranging from critical remote code execution issues to less severe information disclosure bugs, covering the historical period from 2004 through the present day. By navigating this resource, users can effectively track vendor advisories to stay informed about patch availability and remediation timelines. Additionally, the page allows for a deeper understanding of specific weakness classes, such as buffer overflows or cross-site scripting, as they manifest within the xpdf ecosystem. Readers can also look up the complete vulnerability history for xpdf, analyzing trends in flaw introduction and resolution over time. This structured approach facilitates better risk assessment for organizations relying on this PDF processing tool. The data is sourced from public security databases and vendor announcements, ensuring accuracy and traceability. Understanding these patterns helps developers and security engineers prioritize mitigation efforts and update their security configurations accordingly. This aggregation serves as a neutral reference point for technical analysis rather than a promotional overview. It is designed to support informed decision-making by providing clear, factual insights into the security posture of xpdf. Users are encouraged to cross-reference this information with official advisories for the most current guidance on version updates and configuration changes.

Vendor: xpdf

CVE IDTitleCVSSSeverityPublished
CVE-2026-4407 Out-of-bounds array write in Xpdf 4.06 due to missing validation CWE-20 7.8 -2026-03-18
CVE-2025-11896 Stack overflow in Xpdf 4.05 due to object loop in PDF CMap CWE-674 5.5AIMediumAI2025-10-16
CVE-2025-3154 Out-of-bounds array write due to invalid VerticesPerRow in Xpdf 4.05 CWE-787 7.8AIHighAI2025-04-02
CVE-2025-2574 Out-of-bounds array write in Xpdf 4.05 due to incorrect integer overflow checking CWE-190 7.8 -2025-03-20
CVE-2024-7868 Uninitialized variable in Xpdf 4.05 due to invalid JPEG header CWE-457 5.5AIMediumAI2024-08-15
CVE-2024-7867 Integer overflow and divide-by-zero in Xpdf 4.05 due to bogus page box coordinates CWE-369 5.5AIMediumAI2024-08-15
CVE-2024-7866 Stack overflow in Xpdf 4.05 due to object loop in PDF pattern CWE-674 5.5AIMediumAI2024-08-15
CVE-2024-4976 Out-of-bounds array write in Xpdf 4.05 due to missing object type check CWE-787 7.8AIHighAI2024-05-15
CVE-2024-4568 Stack overflow in Xpdf 4.05 due to object loop in PDF resources CWE-674 2.9 Low2024-05-06
CVE-2024-4141 Out-of-bounds array write in Xpdf 4.05 due to incorrect bounds check CWE-787 2.9 Low2024-04-24
CVE-2024-3900 Out-of-bounds stack array write in Xpdf 4.05 due to missing zero check CWE-787 2.9 Low2024-04-17
CVE-2024-3248 Stack overflow in Xpdf 4.05 due to object loop in attachments CWE-674 2.9 Low2024-04-02
CVE-2024-3247 Stack overflow in Xpdf 4.05 due to object loop in PDF object stream CWE-674 2.9 Low2024-04-02
CVE-2024-2971 Out-of-bounds array access due to negative object numbers in indirect references in Xpdf 4.05 CWE-787 2.9 Low2024-03-26
CVE-2023-3436 Deadlock in Xpdf 4.04 due to PDF object stream references CWE-833 3.3 Low2023-06-27
CVE-2023-3044 Divide-by-zero in Xpdf 4.04 due to very large page size CWE-369 3.3 Low2023-06-02
CVE-2023-2664 Stack overflow in Xpdf 4.04 due to object loop in PDF embedded file tree CWE-674 2.9 Low2023-05-11
CVE-2023-2663 Stack overflow in Xpdf 4.04 due to object loop in PDF page label tree CWE-674 2.9 Low2023-05-11
CVE-2023-2662 Divide-by-zero in Xpdf 4.04 due to bad color space object CWE-369 2.9 Low2023-05-11
CVE-2020-25725 Xpdf 资源管理错误漏洞 CWE-416 5.0 Medium2020-11-21
CVE-2010-0206 Xpdf 代码问题漏洞 5.5 -2019-10-30

All 21 known CVE vulnerabilities affecting xpdf with full Chinese analysis, references, and POCs where available.