Infinite Recursion and Stack Overflow in PDF Object Loop
CVE-2024-3247

5.5MEDIUM

Key Information:

Vendor

Xpdf

Status
XPDF
Vendor
CVE Published:
2 April 2024

What is CVE-2024-3247?

Xpdf versions 4.05 and earlier are susceptible to a vulnerability that arises from a PDF object loop in an object stream. This critical flaw leads to infinite recursion, triggering a stack overflow that could disrupt application performance and functionality. It is vital for users and organizations relying on Xpdf to address this vulnerability by updating to the latest versions or implementing necessary countermeasures to mitigate potential impacts.

References

https://forum.xpdfreader.com/viewtopic.php?t=43597

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.