[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fM9ot9gJl9JbAfMk-Hbktih8W1pfMZH7IwScKxvt_O6M":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":80,"topProductsByCves":86,"seoMetadata":88,"meta":97},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":9,"versionCount":11,"lastCveUpdate":12,"firstLetter":13,"products":14,"description":18},36148,"xpdfreader",1,82,46,"2024-08-15","x",[15],{"id":16,"product_name":17,"version_count":11,"cve_count":10,"kev_count":9,"last_cve_update":12},174363,"xpdf","Xpdfreader is a technology vendor with 1 tracked product and 82 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[20,28,37,42,48,53,58,65,70,75],{"cveId":21,"description":22,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":4,"epssScore":27},"CVE-2021-30860","An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.","2021-08-24",7.8,"v3.1","High",0.75994,{"cveId":29,"description":30,"publishedDate":31,"cvssScore":32,"cvssVersion":33,"severity":34,"isKev":35,"epssScore":36},"CVE-2007-3387","Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.","2007-07-30",6.8,"v2","Medium",false,0.08565,{"cveId":38,"description":39,"publishedDate":40,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":35,"epssScore":41},"CVE-2012-2142","The error function in Error.cc in poppler before 0.21.4 allows remote attackers to execute arbitrary commands via a PDF containing an escape sequence for a terminal emulator.","2020-01-09",0.02942,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":33,"severity":26,"isKev":35,"epssScore":47},"CVE-2010-3702","The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) via unknown vectors that trigger an uninitialized pointer dereference.","2010-11-05",7.5,0.02757,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":46,"cvssVersion":25,"severity":26,"isKev":35,"epssScore":52},"CVE-2020-35376","Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp() function.","2020-12-26",0.02123,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":35,"epssScore":57},"CVE-2022-30524","There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by (for example) sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.","2022-05-09",0.01625,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":62,"cvssVersion":63,"severity":34,"isKev":35,"epssScore":64},"CVE-2018-16369","XRef::fetch in XRef.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (stack consumption) via a crafted pdf file, related to AcroForm::scanField, as demonstrated by pdftohtml. NOTE: this might overlap CVE-2018-7453.","2018-09-03",5.5,"v3.0",0.01618,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":24,"cvssVersion":63,"severity":26,"isKev":35,"epssScore":69},"CVE-2018-11033","The DCTStream::readHuffSym function in Stream.cc in the DCT decoder in xpdf before 4.00 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JPEG data.","2018-05-14",0.01276,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":62,"cvssVersion":63,"severity":34,"isKev":35,"epssScore":74},"CVE-2018-18454","CCITTFaxStream::readRow() in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted pdf file, as demonstrated by pdftoppm.","2018-10-18",0.01221,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":24,"cvssVersion":63,"severity":26,"isKev":35,"epssScore":79},"CVE-2019-9878","There is an invalid memory access in the function GfxIndexedColorSpace::mapColorToBase() located in GfxState.cc in Xpdf 4.0.0, as used in pdfalto 0.2. It can be triggered by (for example) sending a crafted pdf file to the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.","2019-03-21",0.01202,[81],{"cveId":21,"description":22,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":4,"epssScore":27,"cisaVulnName":82,"cisaDateAdded":83,"cisaShortDescription":84,"cisaRequiredAction":85},"Apple Multiple Products Integer Overflow Vulnerability","2021-11-03","Apple iOS, iPadOS, macOS, and watchOS CoreGraphics contain an integer overflow vulnerability which may allow code execution when processing a maliciously crafted PDF. The vulnerability is also known under the moniker of FORCEDENTRY.","Apply updates per vendor instructions.",[87],{"id":16,"product_name":17,"version_count":11,"cve_count":10,"kev_count":9,"last_cve_update":12},{"title":89,"metaDescription":90,"keywords":91,"structuredData":92},"Xpdfreader - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Xpdfreader covering 1 product with 82 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Xpdfreader vulnerabilities, Xpdfreader security, Xpdfreader CVE, Xpdfreader threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Xpdfreader KEV, Xpdfreader exploited vulnerabilities",{"@context":93,"@type":94,"name":95,"description":90,"url":96},"https:\u002F\u002Fschema.org","Organization","Xpdfreader","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fxpdfreader",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":12,"generatedAt":98,"apiVersion":99},"2026-10-18T22:27:24.602Z","3.0"]