CVE-2024-4141
EUVD-2024-3270124.04.2024, 19:15
Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid character code in a Type 1 font. The root problem was a bounds check that was being optimized away by modern compilers.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| xpdfreader | xpdf | 𝑥 ≤ 4.05 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| xpdf | xpdf | 𝑥 < 4.05 | ADP |
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| xpdf |
| ||||||||||||||||||
| ipe |
|
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libpoppler-cpp0 |
| ||||||||||||||
| libpoppler-devel |
| ||||||||||||||
| libpoppler-glib-devel |
| ||||||||||||||
| libpoppler-glib8 |
| ||||||||||||||
| libpoppler-qt4-4 |
| ||||||||||||||
| libpoppler117 |
| ||||||||||||||
| libpoppler126 |
| ||||||||||||||
| libpoppler60 |
| ||||||||||||||
| libpoppler89 |
| ||||||||||||||
| poppler-tools |
| ||||||||||||||
| typelib-1_0-Poppler-0_18 |
|
Common Weakness Enumeration