PatchTheCVE: xpdfhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-7868: In Xpdf 4.05 (and earlier), invalid header info in a DCT (JPEG) stream can lead to an uninitialized variable ihttps://patchthecve.com/cve/CVE-2024-7868.htmlhttps://patchthecve.com/cve/CVE-2024-7868.htmlWed, 17 Jun 2026 08:21:04 +0000HIGH 8.2: In Xpdf 4.05 (and earlier), invalid header info in a DCT (JPEG) stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file causes a segfault attempting to read from an invalid address.CVE-2024-7867: In Xpdf 4.05 (and earlier), very large coordinates in a page box can cause an integer overflow and divide-by-zhttps://patchthecve.com/cve/CVE-2024-7867.htmlhttps://patchthecve.com/cve/CVE-2024-7867.htmlWed, 17 Jun 2026 08:21:04 +0000MEDIUM 6.2: In Xpdf 4.05 (and earlier), very large coordinates in a page box can cause an integer overflow and divide-by-zero.CVE-2024-7866: In Xpdf 4.05 (and earlier), a PDF object loop in a pattern resource leads to infinite recursion and a stack ovhttps://patchthecve.com/cve/CVE-2024-7866.htmlhttps://patchthecve.com/cve/CVE-2024-7866.htmlWed, 17 Jun 2026 08:21:04 +0000MEDIUM 5.5: In Xpdf 4.05 (and earlier), a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow.CVE-2024-4568: In Xpdf 4.05 (and earlier), a PDF object loop in the PDF resources leads to infinite recursion and a stack ovehttps://patchthecve.com/cve/CVE-2024-4568.htmlhttps://patchthecve.com/cve/CVE-2024-4568.htmlWed, 17 Jun 2026 08:02:10 +0000LOW 2.9: In Xpdf 4.05 (and earlier), a PDF object loop in the PDF resources leads to infinite recursion and a stack overflow.CVE-2024-4141: Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid character code in a Type 1 fonthttps://patchthecve.com/cve/CVE-2024-4141.htmlhttps://patchthecve.com/cve/CVE-2024-4141.htmlWed, 17 Jun 2026 08:01:12 +0000LOW 2.9: Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid character code in a Type 1 font. The root problem was a bounds check that was being optimized away by modern compilers. CVE-2024-3900: Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by long Unicode sequence in ActualText. https://patchthecve.com/cve/CVE-2024-3900.htmlhttps://patchthecve.com/cve/CVE-2024-3900.htmlWed, 17 Jun 2026 07:45:25 +0000LOW 2.9: Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by long Unicode sequence in ActualText. CVE-2024-3248: In Xpdf 4.05 (and earlier), a PDF object loop in the attachments leads to infinite recursion and a stack overfhttps://patchthecve.com/cve/CVE-2024-3248.htmlhttps://patchthecve.com/cve/CVE-2024-3248.htmlWed, 17 Jun 2026 07:43:36 +0000LOW 2.9: In Xpdf 4.05 (and earlier), a PDF object loop in the attachments leads to infinite recursion and a stack overflow. CVE-2024-3247: In Xpdf 4.05 (and earlier), a PDF object loop in an object stream leads to infinite recursion and a stack overhttps://patchthecve.com/cve/CVE-2024-3247.htmlhttps://patchthecve.com/cve/CVE-2024-3247.htmlWed, 17 Jun 2026 07:43:36 +0000LOW 2.9: In Xpdf 4.05 (and earlier), a PDF object loop in an object stream leads to infinite recursion and a stack overflow. CVE-2024-2971: Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference https://patchthecve.com/cve/CVE-2024-2971.htmlhttps://patchthecve.com/cve/CVE-2024-2971.htmlWed, 17 Jun 2026 07:25:55 +0000LOW 2.9: Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file. CVE-2022-48545: An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02.https://patchthecve.com/cve/CVE-2022-48545.htmlhttps://patchthecve.com/cve/CVE-2022-48545.htmlWed, 17 Jun 2026 05:15:36 +0000MEDIUM 5.5: An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02.CVE-2023-3436: Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream. https://patchthecve.com/cve/CVE-2023-3436.htmlhttps://patchthecve.com/cve/CVE-2023-3436.htmlWed, 17 Jun 2026 06:14:04 +0000LOW 3.3: Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream. CVE-2023-3044: An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a dividhttps://patchthecve.com/cve/CVE-2023-3044.htmlhttps://patchthecve.com/cve/CVE-2023-3044.htmlWed, 17 Jun 2026 06:13:14 +0000LOW 3.3: An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdf's text extraction code. This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate. CVE-2023-2664:  In Xpdf 4.04 (and earlier), a PDF object loop in the embedded file tree leads to infinite recursion and a stahttps://patchthecve.com/cve/CVE-2023-2664.htmlhttps://patchthecve.com/cve/CVE-2023-2664.htmlWed, 17 Jun 2026 05:53:08 +0000LOW 2.9:  In Xpdf 4.04 (and earlier), a PDF object loop in the embedded file tree leads to infinite recursion and a stack overflow. CVE-2023-2663:  In Xpdf 4.04 (and earlier), a PDF object loop in the page label tree leads to infinite recursion and a stack https://patchthecve.com/cve/CVE-2023-2663.htmlhttps://patchthecve.com/cve/CVE-2023-2663.htmlWed, 17 Jun 2026 05:53:08 +0000LOW 2.9:  In Xpdf 4.04 (and earlier), a PDF object loop in the page label tree leads to infinite recursion and a stack overflow. CVE-2023-2662: In Xpdf 4.04 (and earlier), a bad color space object in the input PDF file can cause a divide-by-zero. https://patchthecve.com/cve/CVE-2023-2662.htmlhttps://patchthecve.com/cve/CVE-2023-2662.htmlWed, 17 Jun 2026 05:53:08 +0000LOW 2.9: In Xpdf 4.04 (and earlier), a bad color space object in the input PDF file can cause a divide-by-zero.