Known vulnerabilities in xpdf

Software: xpdf
Software CPE: cpe:2.3:a:glyph_and_cog:xpdf:*:*:*:*:*:*:*:*
Total vulnerabilities: 86
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting xpdf xpdf is affected by 86 known vulnerabilities: 18 high, 47 medium, 21 low Critical High Medium Low

Vulnerabilities (86)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120190 - Uncontrolled Recursion
CVE-2025-11896
CWE-674 Low
No
No
4.06 18.12.2025 SB2024061390
SB2025121846
SB2025121847
and 3 more
#VU118788 - Out-of-bounds write
CVE-2025-3154
CWE-787 High
No
No
4.06 26.11.2025 SB2024061390
SB2025112652
#VU92076 - Out-of-bounds write
CVE-2024-4141
CWE-787 High
No
No
4.06 13.06.2024 SB2024061390
SB2024061392
SB2024061393
and 7 more
#VU82765 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-48545
CWE-835 Low
No
No
4.03 06.11.2023 SB2023110653
SB2023110663
SB2023112457
#VU79517 - Out-of-bounds write
CVE-2021-36493
CWE-787 Medium
No
No
- 15.08.2023 SB2023081526
#VU79516 - Stack-based buffer overflow
CVE-2022-45586
CWE-121 Medium
No
No
- 15.08.2023 SB2023081526
SB2024092602
#VU79515 - Out-of-bounds write
CVE-2022-45587
CWE-787 Medium
No
No
- 15.08.2023 SB2023081526
SB2024092602
#VU79514 - Divide By Zero
CVE-2023-2662
CWE-369 Medium
No
No
- 15.08.2023 SB2023081526
SB2024020949
SB2024092602
#VU79513 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-2663
CWE-835 Medium
No
No
- 15.08.2023 SB2023081526
SB2024020949
SB2024092602
#VU79512 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-2664
CWE-835 Medium
No
No
- 15.08.2023 SB2023081526
SB2024020949
SB2024092602
#VU79511 - Divide By Zero
CVE-2023-3044
CWE-369 Medium
No
No
- 15.08.2023 SB2023081526
SB2024020949
SB2024092602
#VU79510 - Deadlock
CVE-2023-3436
CWE-833 Medium
No
No
- 15.08.2023 SB2023081520
SB2024020949
SB2024092602
#VU74024 - NULL Pointer Dereference
CVE-2022-41843
CWE-476 Low
No
No
- 24.03.2023 SB2023032424
SB2024092602
#VU74023 - NULL Pointer Dereference
CVE-2022-38928
CWE-476 High
No
No
- 24.03.2023 SB2023032424
SB2024092602
SB20250328446
#VU74022 - Use After Free
CVE-2022-38222
CWE-416 High
No
No
- 24.03.2023 SB2023032424
SB2024092602
SB20250328446
#VU74021 - Allocation of Resources Without Limits or Throttling
CVE-2022-30775
CWE-770 Medium
No
No
- 24.03.2023 SB2023032424
SB2024092602
#VU74020 - Out-of-bounds write
CVE-2022-30524
CWE-787 High
No
No
- 24.03.2023 SB2023032424
SB2024092602
#VU74015 - Improper input validation
CVE-2022-36561
CWE-20 Medium
No
No
- 24.03.2023 SB2023032424
SB2024020949
SB2024092602
#VU74014 - Out-of-bounds write
CVE-2022-33108
CWE-787 High
No
No
- 24.03.2023 SB2023032424
SB2024092602
#VU74013 - Uncontrolled Recursion
CVE-2019-16088
CWE-674 Medium
No
No
- 24.03.2023 SB2023032424


Showing elements 1 - 20 out of 86