What’s Vulnerable › Products

Xpdf vulnerabilities

88 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your Xpdf version is affected

Exploited Xpdf vulnerabilities

• CVE-2021-30860 — Apple Multiple Products Integer Overflow Vulnerability

Latest Xpdf vulnerabilities

• CVE-2026-116671 — Infinite loop in Xpdf due to missing validation in JPEG 2000 decoder (CVSS 2.1)
• CVE-2026-85458 — Divide-by-zero in Xpdf 4.06 due to zero-height Type 3 glyph (CVSS 2.1)
• CVE-2026-4407 — Out-of-bounds array write in Xpdf 4.06 due to missing validation (CVSS 2.1)
• CVE-2025-11896 — Stack overflow in Xpdf 4.05 due to object loop in PDF CMap (CVSS 2.1)
• CVE-2025-3154 — Out-of-bounds array write due to invalid VerticesPerRow in Xpdf 4.05 (CVSS 2.1)
• CVE-2025-2574 — Out-of-bounds array write in Xpdf 4.05 due to incorrect integer overflow checking (CVSS 2.1)
• CVE-2024-7868 — Uninitialized variable in Xpdf 4.05 due to invalid JPEG header (CVSS 8.2)
• CVE-2024-7867 — Integer overflow and divide-by-zero in Xpdf 4.05 due to bogus page box coordinates (CVSS 6.2)
• CVE-2024-7866 — Stack overflow in Xpdf 4.05 due to object loop in PDF pattern (CVSS 5.5)
• CVE-2024-4976 — Out-of-bounds array write in Xpdf 4.05 due to missing object type check (CVSS 5.5)
• CVE-2024-4568 — Stack overflow in Xpdf 4.05 due to object loop in PDF resources (CVSS 5.5)
• CVE-2024-4141 — Out-of-bounds array write in Xpdf 4.05 due to incorrect bounds check (CVSS 5.5)
• CVE-2024-3900 — Out-of-bounds stack array write in Xpdf 4.05 due to missing zero check (CVSS 5.5)
• CVE-2024-3248 — Stack overflow in Xpdf 4.05 due to object loop in attachments (CVSS 5.5)
• CVE-2024-3247 — Stack overflow in Xpdf 4.05 due to object loop in PDF object stream (CVSS 5.5)
• CVE-2024-2971 — Out-of-bounds array access due to negative object numbers in indirect references in Xpdf 4.05 (CVSS 5.5)
• CVE-2022-48545 — (CVSS 5.5)
• CVE-2023-3436 — Deadlock in Xpdf 4.04 due to PDF object stream references (CVSS 3.3)
• CVE-2023-3044 — Divide-by-zero in Xpdf 4.04 due to very large page size (CVSS 3.3)
• CVE-2023-2664 — Stack overflow in Xpdf 4.04 due to object loop in PDF embedded file tree (CVSS 5.5)
• CVE-2023-2663 — Stack overflow in Xpdf 4.04 due to object loop in PDF page label tree (CVSS 5.5)
• CVE-2023-2662 — Divide-by-zero in Xpdf 4.04 due to bad color space object (CVSS 5.5)
• CVE-2023-26930 — (CVSS 5.5)
• CVE-2022-45587 — (CVSS 5.5)
• CVE-2022-45586 — (CVSS 5.5)