CVE-2024-3900

Published: 17 April 2024

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by long Unicode sequence in ActualText.

Notes

As of 2024-04-19, there are no details on what the actual issue
or fix is, or whether or not a similar issue exists in poppler.
Marking as deferred for now.

Status

References

• https://www.cve.org/CVERecord?id=CVE-2024-3900
• https://www.xpdfreader.com/security-bug/CVE-2024-3900.html
• NVD
• Launchpad
• Debian

Bugs

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2024-3900