low2.9
CVE-2024-4141
Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid character code in a Type 1 font.
Impact
Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid character code in a Type 1 font. The root problem was a bounds check that was being optimized away by modern compilers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xpdfreader | Xpdf | through 4.05 |