CVE-2024-2971lowCWE-787

CVE-2024-2971: falha de baixa gravidade em Xpdf

Out-of-bounds array access due to negative object numbers in indirect references in Xpdf 4.05

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Xpdf

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 2.9epss 0.2%
Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file.
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Produtos afetados
Xpdf · Xpdf
CVEs relacionadas — Xpdf

No mesmo produto, das mais perigosas para as menos.

CVE-2023-2663LOWStack overflow in Xpdf 4.04 due to object loop in PDF page label treeEPSS 0.5%CVE-2024-7868LOWUninitialized variable in Xpdf 4.05 due to invalid JPEG headerEPSS 0.4%CVE-2023-3044LOWDivide-by-zero in Xpdf 4.04 due to very large page sizeEPSS 0.3%CVE-2023-2664LOWStack overflow in Xpdf 4.04 due to object loop in PDF embedded file treeEPSS 0.3%CVE-2024-3247LOWStack overflow in Xpdf 4.05 due to object loop in PDF object streamEPSS 0.3%CVE-2024-3248LOWStack overflow in Xpdf 4.05 due to object loop in attachmentsEPSS 0.3%