Infinite Recursion and Stack Overflow in PDF Object Loop
CVE-2024-3248

5.5MEDIUM

Key Information:

What is CVE-2024-3248?

In Xpdf 4.05 (and earlier), a PDF object loop in the attachments leads to infinite recursion and a stack overflow.

Xpdf all 0 <= 4.05

Score:

5.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

CVE-2024-3248 Data