PT-2023-24838

CVE-2023-3436

·

Published

2023-06-27

·

Updated

2026-10-31

Description by

CVSS 3.1
3.3
Low
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions Xpdf version 4.04
Description The issue occurs when Xpdf 4.04 encounters a PDF object stream whose Length field is itself in another object stream, causing a deadlock.
Recommendations For Xpdf version 4.04, consider updating to a newer version that contains a fix for this issue, as the current version will deadlock on specific PDF object streams. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2024-10474
ALT-PU-2024-10804
ALT-PU-2024-7465
CLEANSTART-2024-EI53892
MGASA-2024-0035
Found an issue in the description? Have something to add? Feel free to write us 👾