CVE Intelligence

Xpdf vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Xpdf products: 2 record(s), with severity, exploitation and fixes.

Xpdf 2

Exploited only (KEV) →

CVE-2026-4407 Low · 2.1 CWE-20 Mar 18, 2026
Out-of-bounds array write in Xpdf 4.06 due to missing validation
Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces.
CVE-2025-11896 Low · 2.1 CWE-674 Oct 16, 2025
Stack overflow in Xpdf 4.05 due to object loop in PDF CMap
In Xpdf 4.05 (and earlier), a PDF object loop in a CMap, via the "UseCMap" entry, leads to infinite recursion and a stack overflow.