Back to Database
Status published
Medium
CVE-2018-18650
An issue was discovered in Xpdf 4.00. XRef::readXRefStream in XRef.cc...
Vulnerability Description
An issue was discovered in Xpdf 4.00. XRef::readXRefStream in XRef.cc allows attackers to launch a denial of service (Integer Overflow) via a crafted /Size value in a pdf file, as demonstrated by pdftohtml. This is mainly caused by the program attempting a malloc operation for a large amount of memory.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-18650
Credits & Attribution
No credits recorded in the NVD database.
More from xpdfreader
View All →CVE-2022-48545
An infinite recursion in Catalog::findDestInTree can cause denial of service...
Medium
5.5
CVE-2022-45587
Stack overflow vulnerability in function gmalloc in goo/gmem.cc in xpdf...
Unknown
0
CVE-2022-45586
Stack overflow vulnerability in function Dict::find in xpdf/Dict.cc in xpdf...
Unknown
0
CVE-2022-43295
XPDF v4.04 was discovered to contain a stack overflow via...
Unknown
0
CVE-2022-43071
A stack overflow in the Catalog::readPageLabelTree2(Object*) function of XPDF v4.04...
Unknown
0
Affected Vendor
xpdfreader
View all reports →Affected Software
xpdf
Vulnerable Versions:
4.00
Timeline
Official Publish:
October 25th, 2018
Last Modified:
September 17th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.