https://vulnogram.org/ Most recent CVEs assigned by Glyph & Cog, LLC (gandc). https://vulnogram.org/seaview/icons/gandc.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-85458 https://vulnogram.org/CVE-2026-85458 Divide-by-zero in Xpdf 4.06 (and earlier), when a glyph in a Type 3 font has a zero height. Low Thu, 03 Sep 2026 20:25:18 GMT https://vulnogram.org/CVE-2026-4407 https://vulnogram.org/CVE-2026-4407 Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces. Low Wed, 18 Mar 2026 21:44:36 GMT https://vulnogram.org/CVE-2025-11896 https://vulnogram.org/CVE-2025-11896 In Xpdf 4.05 (and earlier), a PDF object loop in a CMap, via the "UseCMap" entry, leads to infinite recursion and a stack overflow. Low Thu, 16 Oct 2025 21:59:45 GMT https://vulnogram.org/CVE-2025-3154 https://vulnogram.org/CVE-2025-3154 Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid VerticesPerRow value in a PDF shading dictionary. Low Wed, 02 Apr 2025 22:18:46 GMT https://vulnogram.org/CVE-2025-2574 https://vulnogram.org/CVE-2025-2574 Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code. Low Thu, 20 Mar 2025 21:07:46 GMT https://vulnogram.org/CVE-2024-7868 https://vulnogram.org/CVE-2024-7868 In Xpdf 4.05 (and earlier), invalid header info in a DCT (JPEG) stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file causes a segfault attempting to read from an invalid address. Low Thu, 15 Aug 2024 20:22:52 GMT https://vulnogram.org/CVE-2024-7867 https://vulnogram.org/CVE-2024-7867 In Xpdf 4.05 (and earlier), very large coordinates in a page box can cause an integer overflow and divide-by-zero. Low Thu, 15 Aug 2024 20:06:47 GMT https://vulnogram.org/CVE-2024-7866 https://vulnogram.org/CVE-2024-7866 In Xpdf 4.05 (and earlier), a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow. Low Thu, 15 Aug 2024 19:50:06 GMT https://vulnogram.org/CVE-2024-4976 https://vulnogram.org/CVE-2024-4976 Out-of-bounds array write in Xpdf 4.05 and earlier, due to missing object type check in AcroForm field reference. Low Wed, 15 May 2024 20:34:24 GMT https://vulnogram.org/CVE-2024-4568 https://vulnogram.org/CVE-2024-4568 In Xpdf 4.05 (and earlier), a PDF object loop in the PDF resources leads to infinite recursion and a stack overflow. Low Mon, 06 May 2024 19:56:15 GMT https://vulnogram.org/CVE-2024-4141 https://vulnogram.org/CVE-2024-4141 Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid character code in a Type 1 font. The root problem was a bounds check that was being optimized away by modern compilers. Low Wed, 24 Apr 2024 18:36:49 GMT https://vulnogram.org/CVE-2024-3900 https://vulnogram.org/CVE-2024-3900 Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by long Unicode sequence in ActualText. Low Wed, 17 Apr 2024 18:41:03 GMT https://vulnogram.org/CVE-2024-3248 https://vulnogram.org/CVE-2024-3248 In Xpdf 4.05 (and earlier), a PDF object loop in the attachments leads to infinite recursion and a stack overflow. Low Tue, 02 Apr 2024 23:04:40 GMT https://vulnogram.org/CVE-2024-3247 https://vulnogram.org/CVE-2024-3247 In Xpdf 4.05 (and earlier), a PDF object loop in an object stream leads to infinite recursion and a stack overflow. Low Tue, 02 Apr 2024 22:57:35 GMT https://vulnogram.org/CVE-2024-2971 https://vulnogram.org/CVE-2024-2971 Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file. Low Tue, 26 Mar 2024 21:31:43 GMT https://vulnogram.org/CVE-2023-3436 https://vulnogram.org/CVE-2023-3436 Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream. Low Tue, 27 Jun 2023 20:55:21 GMT https://vulnogram.org/CVE-2023-3044 https://vulnogram.org/CVE-2023-3044 An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdf's text extraction code. This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rathe… Low Fri, 02 Jun 2023 22:32:31 GMT https://vulnogram.org/CVE-2023-2664 https://vulnogram.org/CVE-2023-2664 In Xpdf 4.04 (and earlier), a PDF object loop in the embedded file tree leads to infinite recursion and a stack overflow. Low Thu, 11 May 2023 20:21:25 GMT https://vulnogram.org/CVE-2023-2663 https://vulnogram.org/CVE-2023-2663 In Xpdf 4.04 (and earlier), a PDF object loop in the page label tree leads to infinite recursion and a stack overflow. Critical Network Exploitable Thu, 11 May 2023 20:16:59 GMT https://vulnogram.org/CVE-2023-2662 https://vulnogram.org/CVE-2023-2662 In Xpdf 4.04 (and earlier), a bad color space object in the input PDF file can cause a divide-by-zero. Medium Thu, 11 May 2023 20:08:25 GMT