Skip to content

Xpdfreader · weakness class

Denial of Service

14 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

  1. An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for the psOpIdiv case.CVE-2019-10018Xpdfreader · 1.1% likely

    CWE-369

  2. An issue was discovered in Xpdf 4.00. catalog->getNumPages() in AcroForm.cc allows attackers to launch a denial of service (hang caused by large loop) via a specific pdf file, as…CVE-2018-18651Xpdfreader · 0.9% likely

    CWE-834

  3. Infinite recursion in AcroForm::scanField in AcroForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file due to lack of loop checking, as demonst…CVE-2018-7453Xpdfreader · 0.9% likely

    CWE-835

  4. An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for the psOpMod case.CVE-2019-10023Xpdfreader · 0.9% likely

    CWE-369

  5. An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nComps.CVE-2019-10021Xpdfreader · 0.9% likely

    CWE-369

  6. An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PSOutputDev::checkPageSlice at PSOutputDev.cc for nStripes.CVE-2019-10019Xpdfreader · 0.9% likely

    CWE-369

  7. An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec in Function.cc for the psOpRoll case.CVE-2019-10026Xpdfreader · 0.9% likely

    CWE-369

  8. An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nBits.CVE-2019-10025Xpdfreader · 0.9% likely

    CWE-369

  9. An issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu at Splash.cc for y Bresenham parameters.CVE-2019-10024Xpdfreader · 0.9% likely

    CWE-369

  10. An issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu at Splash.cc for x Bresenham parameters.CVE-2019-10020Xpdfreader · 0.9% likely

    CWE-369

  11. xpdf 4.04 allocates excessive memory when presented with crafted input. This can be triggered by (for example) sending a crafted PDF document to the pdftoppm binary. It is most ea…CVE-2022-30775Xpdfreader · 0.8% likely

    CWE-770

  12. An issue was discovered in xpdf 4.00. An infinite loop in XRef::Xref allows an attacker to cause denial of service because loop detection exists only for tables, not streams.CVE-2018-7174Xpdfreader · 0.8% likely

    CWE-835

  13. XPDF v4.04 and earlier was discovered to contain a stack overflow via the function Catalog::countPageTree() at Catalog.cc.CVE-2022-38334Xpdfreader · 0.4% likely

    CWE-674

  14. An infinite recursion in Catalog::findDestInTree can cause denial of service for xpdf 4.02.CVE-2022-48545Xpdfreader · 0.3% likely

    CWE-674

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.