Deadlock in Xpdf 4.04 due to PDF object stream references
CVE-2023-3436

3.3LOW

Key Information:

What is CVE-2023-3436?

Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream.

Xpdf all 4.04

Score:

3.3

Severity:

LOW

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Jiahao Liu

CVE-2023-3436 Data