CVE search results

1 – 10 of 109 results

Detailed view

Sort by:

CVE-2019-9878

Medium priority

Ignored

There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase() located in GfxState.cc in Xpdf 4.0.0, as used in pdfalto 0.2. It can be triggered by (for example) sending a crafted pdf file to the pdftops...

4 affected packages

ipe, libextractor, xpdf, poppler

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
ipe	—	Not affected	Not affected	Not affected
libextractor	—	Not affected	Not affected	Not affected
xpdf	—	Not affected	Not in release	Not affected
poppler	—	Not affected	Not affected	Not affected

CVE-2019-9877

Low priority

Ignored

There is an invalid memory access vulnerability in the function TextPage::findGaps() located at TextOutputDev.c in Xpdf 4.01, which can (for example) be triggered by sending a crafted pdf file to the pdftops binary. It allows an...

4 affected packages

poppler, xpdf, ipe, libextractor

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
poppler	—	Not affected	Not affected	Not affected
xpdf	—	Not affected	Not in release	Not affected
ipe	—	Not affected	Not affected	Not affected
libextractor	—	Not affected	Not affected	Not affected

CVE-2019-9589

Low priority

Ignored

There is a NULL pointer dereference vulnerability in PSOutputDev::setupResources() located in PSOutputDev.cc in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdftops binary. It allows an...

6 affected packages

xpdf, ipe, libextractor, poppler, texlive-bin, utopia-documents

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
xpdf	—	Not affected	Not in release	Not affected
ipe	—	Not affected	Not affected	Not affected
libextractor	—	Not affected	Not affected	Not affected
poppler	—	Not affected	Not affected	Not affected
texlive-bin	—	Not affected	Not affected	Not affected
utopia-documents	—	Not in release	Not in release	Not in release

CVE-2019-9588

Low priority

Vulnerable

There is an Invalid memory access in gAtomicIncrement() located at GMutex.h in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdftops binary. It allows an attacker to cause Denial of Service...

6 affected packages

texlive-bin, libextractor, ipe, xpdf, poppler, utopia-documents

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
texlive-bin	Vulnerable	Vulnerable	Vulnerable	Vulnerable
libextractor	Not affected	Not affected	Not affected	Not affected
ipe	Not affected	Not affected	Not affected	Not affected
xpdf	Not affected	Not affected	Not in release	Not affected
poppler	Not affected	Not affected	Not affected	Not affected
utopia-documents	Not in release	Not in release	Not in release	Not in release

CVE-2019-9587

Negligible priority

Vulnerable

There is a stack consumption issue in md5Round1() located in Decrypt.cc in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service...

6 affected packages

texlive-bin, ipe, libextractor, poppler, utopia-documents, xpdf

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
texlive-bin	Vulnerable	Vulnerable	Vulnerable	Vulnerable
ipe	Not affected	Not affected	Not affected	Not affected
libextractor	Not affected	Not affected	Not affected	Not affected
poppler	Not affected	Not affected	Not affected	Not affected
utopia-documents	Not in release	Not in release	Not in release	Not in release
xpdf	Not affected	Not affected	Not in release	Not affected

CVE-2019-15531

Medium priority

Some fixes available 1 of 4

GNU Libextractor through 1.9 has a heap-based buffer over-read in the function EXTRACTOR_dvi_extract_method in plugins/dvi_extractor.c.

1 affected package

libextractor

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
libextractor	Not affected	Not affected	Not affected	Vulnerable

CVE-2019-14294

Medium priority

Needs evaluation

An issue was discovered in Xpdf 4.01.01. There is a use-after-free in the function JPXStream::fillReadBuf at JPXStream.cc, due to an out of bounds read.

4 affected packages

ipe, libextractor, poppler, xpdf

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
ipe	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
libextractor	Not affected	Not affected	Not affected	Not affected
poppler	Not affected	Not affected	Not affected	Not affected
xpdf	Not affected	Not affected	Not in release	Not affected

CVE-2019-14293

Medium priority

Needs evaluation

An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA!=6 case 2.

4 affected packages

ipe, libextractor, poppler, xpdf

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
ipe	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
libextractor	Not affected	Not affected	Not affected	Not affected
poppler	Not affected	Not affected	Not affected	Not affected
xpdf	Not affected	Not affected	Not in release	Not affected

CVE-2019-14292

Medium priority

Needs evaluation

An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA!=6 case 1.

4 affected packages

ipe, libextractor, xpdf, poppler

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
ipe	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
libextractor	Not affected	Not affected	Not affected	Not affected
xpdf	Not affected	Not affected	Not in release	Not affected
poppler	Not affected	Not affected	Not affected	Not affected

CVE-2019-14291

Medium priority

Needs evaluation

An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA==6 case 3.

4 affected packages

ipe, libextractor, poppler, xpdf

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
ipe	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
libextractor	Not affected	Not affected	Not affected	Not affected
poppler	Not affected	Not affected	Not affected	Not affected
xpdf	Not affected	Not affected	Not in release	Not affected

Export to JSON

Results by page:

Search CVE reports