CVE-2024-4141

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid character code in a Type 1 font. The root problem was a bounds check that was being optimized away by modern compilers.

Score

CVSS 3.1 5.5 Medium

Status

Analyzed - xpdf@xpdfreader.com

Published

2024-04-24

Last modified

2024-08-01

Weaknesses

CWE-787

Affected products

• Xpdf (Xpdf)
• Xpdf (Xpdfreader)

References

• https://www.xpdfreader.com/security-bug/CVE-2024-4141.html