PatchTheCVE: gpdfhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2009-4035: The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and phttps://patchthecve.com/cve/CVE-2009-4035.htmlhttps://patchthecve.com/cve/CVE-2009-4035.htmlTue, 16 Jun 2026 23:12:52 +0000HIGH 9.3: The FoFiType1::parse function in fofi/FoFiType1.cc in Xpdf 3.0.0, gpdf 2.8.2, kpdf in kdegraphics 3.3.1, and possibly other libraries and versions, does not check the return value of the getNextLine function, which allows context-dependent attackers to execute arbitrary code via a PDF file with a crCVE-2007-3387: Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before https://patchthecve.com/cve/CVE-2007-3387.htmlhttps://patchthecve.com/cve/CVE-2007-3387.htmlTue, 16 Jun 2026 22:41:54 +0000MEDIUM 6.8: Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggeCVE-2006-1244: Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdhttps://patchthecve.com/cve/CVE-2006-1244.htmlhttps://patchthecve.com/cve/CVE-2006-1244.htmlTue, 16 Jun 2026 22:22:17 +0000HIGH 7.6: Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, (c) pdftohtml, and (d) libextractor, has unknown impact and user-assisted attack vectors, possibly involving errors in (1) gmem.c, (2) SplashXPathScanner.cc, (3) JBCVE-2005-0206: The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit arhttps://patchthecve.com/cve/CVE-2005-0206.htmlhttps://patchthecve.com/cve/CVE-2005-0206.htmlTue, 16 Jun 2026 22:10:41 +0000HIGH 7.5: The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.CVE-2004-0889: Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attachttps://patchthecve.com/cve/CVE-2004-0889.htmlhttps://patchthecve.com/cve/CVE-2004-0889.htmlTue, 16 Jun 2026 22:06:36 +0000HIGH 10.0: Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0888.CVE-2004-0888: Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and https://patchthecve.com/cve/CVE-2004-0888.htmlhttps://patchthecve.com/cve/CVE-2004-0888.htmlTue, 16 Jun 2026 22:06:36 +0000HIGH 10.0: Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.