CVE-2026-4407

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces.

Score

CVSS 4.0 2.1 Low

Status

Awaiting Analysis - xpdf@xpdfreader.com

Published

2026-03-18

Last modified

2026-03-19

Weaknesses

CWE-20, CWE-787

Affected products

• Xpdf (Xpdf)

References

• https://www.xpdfreader.com/security-bug/CVE-2026-4407.html