Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-26930

No fix known EPSS <1%

Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. NOTE: Vendor states “it's an expected abort on out-of-memory error.”

Published 2023-04-26 · CVE record · OSV

Products: xpdfreader xpdf