Patchwire CVEs, their patch status, and feeds to follow them

CVE-2019-13288

No fix known EPSS 5%

In Xpdf 4.01.01, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote attacker can leverage this for a DoS attack. This is similar to CVE-2018-16646.

Published 2019-07-04 · CVE record · OSV

Products: glyphandcog xpdfreader