CVE-2025-2574

Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code.

Score

CVSS 4.0 2.1 Low

Status

Deferred - xpdf@xpdfreader.com

Published

2025-03-20

Last modified

2025-10-06

Weaknesses

CWE-190

Affected products

• Xpdf (Xpdf)

References

• https://www.xpdfreader.com/security-bug/CVE-2025-2574.html