Xpdf
21 CVEs tracked since 2000. Since Oct 2000, none of them reached CISA KEV.
Xpdf CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2000-10 | 2 | 0 |
| 2000-11 | null or fewer | |
| 2000-12 | null or fewer | |
| 2001-01 | null or fewer | |
| 2001-02 | null or fewer | |
| 2001-03 | null or fewer | |
| 2001-04 | null or fewer | |
| 2001-05 | null or fewer | |
| 2001-06 | null or fewer | |
| 2001-07 | null or fewer | |
| 2001-08 | null or fewer | |
| 2001-09 | null or fewer | |
| 2001-10 | null or fewer | |
| 2001-11 | null or fewer | |
| 2001-12 | null or fewer | |
| 2002-01 | null or fewer | |
| 2002-02 | null or fewer | |
| 2002-03 | null or fewer | |
| 2002-04 | null or fewer | |
| 2002-05 | null or fewer | |
| 2002-06 | null or fewer | |
| 2002-07 | null or fewer | |
| 2002-08 | null or fewer | |
| 2002-09 | null or fewer | |
| 2002-10 | null or fewer | |
| 2002-11 | null or fewer | |
| 2002-12 | null or fewer | |
| 2003-01 | null or fewer | |
| 2003-02 | null or fewer | |
| 2003-03 | null or fewer | |
| 2003-04 | null or fewer | |
| 2003-05 | null or fewer | |
| 2003-06 | 1 | 0 |
| 2003-07 | null or fewer | |
| 2003-08 | null or fewer | |
| 2003-09 | null or fewer | |
| 2003-10 | null or fewer | |
| 2003-11 | null or fewer | |
| 2003-12 | null or fewer | |
| 2004-01 | null or fewer | |
| 2004-02 | null or fewer | |
| 2004-03 | null or fewer | |
| 2004-04 | null or fewer | |
| 2004-05 | null or fewer | |
| 2004-06 | null or fewer | |
| 2004-07 | null or fewer | |
| 2004-08 | null or fewer | |
| 2004-09 | null or fewer | |
| 2004-10 | 2 | 0 |
| 2004-11 | null or fewer | |
| 2004-12 | 1 | 0 |
| 2005-01 | 1 | 0 |
| 2005-02 | null or fewer | |
| 2005-03 | null or fewer | |
| 2005-04 | null or fewer | |
| 2005-05 | null or fewer | |
| 2005-06 | null or fewer | |
| 2005-07 | null or fewer | |
| 2005-08 | null or fewer | |
| 2005-09 | null or fewer | |
| 2005-10 | null or fewer | |
| 2005-11 | null or fewer | |
| 2005-12 | 3 | 0 |
| 2006-01 | 6 | 0 |
| 2006-02 | null or fewer | |
| 2006-03 | 2 | 0 |
| 2006-04 | null or fewer | |
| 2006-05 | null or fewer | |
| 2006-06 | null or fewer | |
| 2006-07 | null or fewer | |
| 2006-08 | null or fewer | |
| 2006-09 | null or fewer | |
| 2006-10 | null or fewer | |
| 2006-11 | null or fewer | |
| 2006-12 | null or fewer | |
| 2007-01 | null or fewer | |
| 2007-02 | null or fewer | |
| 2007-03 | null or fewer | |
| 2007-04 | null or fewer | |
| 2007-05 | null or fewer | |
| 2007-06 | null or fewer | |
| 2007-07 | null or fewer | |
| 2007-08 | null or fewer | |
| 2007-09 | null or fewer | |
| 2007-10 | null or fewer | |
| 2007-11 | 3 | 0 |
Products
The products that kept showing up in Xpdf's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Xpdf.
- CVE-2026-85458Divide-by-zero in Xpdf 4.06 due to zero-height Type 3 glyph—
- CVE-2026-4407Out-of-bounds array write in Xpdf 4.06 due to missing validation—
- CVE-2025-11896Stack overflow in Xpdf 4.05 due to object loop in PDF CMap—
- CVE-2025-3154Out-of-bounds array write due to invalid VerticesPerRow in Xpdf 4.05—
- CVE-2025-2574Out-of-bounds array write in Xpdf 4.05 due to incorrect integer overflow checking2.9
- CVE-2024-7868Uninitialized variable in Xpdf 4.05 due to invalid JPEG header8.2
- CVE-2024-7867Integer overflow and divide-by-zero in Xpdf 4.05 due to bogus page box coordinates6.2
- CVE-2024-7866Stack overflow in Xpdf 4.05 due to object loop in PDF pattern5.5
- CVE-2024-4976Out-of-bounds array write in Xpdf 4.05 due to missing object type check5.5
- CVE-2024-4568Stack overflow in Xpdf 4.05 due to object loop in PDF resources2.9
- CVE-2024-4141Out-of-bounds array write in Xpdf 4.05 due to incorrect bounds check2.9
- CVE-2024-3900Out-of-bounds stack array write in Xpdf 4.05 due to missing zero check2.9
- CVE-2024-3248Stack overflow in Xpdf 4.05 due to object loop in attachments2.9
- CVE-2024-3247Stack overflow in Xpdf 4.05 due to object loop in PDF object stream2.9
- CVE-2024-2971Out-of-bounds array access due to negative object numbers in indirect references in Xpdf 4.052.9
The record
- Peak rank
- #14 in Jan 2006
- Busiest month shown
- Jan 2006, 6 CVEs
- Months with a KEV entry
- 0 since Oct 2000
- Monthly snapshots
- 9 since 2000