CVE-2024-2971

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by negative object number in indirect reference in the input PDF file.

Score

CVSS 3.1 5.5 Medium

Status

Analyzed - xpdf@xpdfreader.com

Published

2024-03-26

Last modified

2024-08-06

Weaknesses

CWE-787

Affected products

• Xpdf (Xpdf)
• Xpdf (Xpdfreader)

References

• https://www.xpdfreader.com/security-bug/CVE-2024-2971.html