CVE-2025-3154

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid VerticesPerRow value in a PDF shading dictionary.

Score

CVSS 4.0 2.1 Low

Status

Deferred - xpdf@xpdfreader.com

Published

2025-04-02

Last modified

2025-04-03

Weaknesses

CWE-787

Affected products

• Xpdf (Xpdf)

References

• https://www.xpdfreader.com/security-bug/CVE-2025-3154.html