CVE-2024-7866
CVE-2024-7866 · Stack overflow in Xpdf 4.05 due to object loop in PDF pattern
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In Xpdf 4.05 (and earlier), a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow.
CVSS 2.1 · Low · EPSS 0.2%
- Published
- Updated
Stack: system
Affected products and versions
xpdf
- Versions
- ≥ 0, ≤ 4.05: Affected (Version)
No fix published
ipe Ubuntu:16.04:LTS
- Versions
- 7.1.4-2.1
- 7.1.8-1
- 7.1.10-1
- 7.1.10-1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:16.04:LTS
- Versions
- 3.03-17ubuntu2
- 3.03-17ubuntu3
- 3.03-17ubuntu5
- 3.03-18
- 3.04-1
- 3.04-1build1
- 3.04-1ubuntu1
- 3.04-1ubuntu1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:18.04:LTS
- Versions
- 7.2.7-2
- 7.2.7-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:18.04:LTS
- Versions
- 3.04-4build1
- 3.04-5
- 3.04-5ubuntu2
- 3.04-6ubuntu1
- 3.04-7
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:20.04:LTS
- Versions
- 7.2.9-1
- 7.2.13-2
- 7.2.13-2build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:22.04:LTS
- Versions
- 7.2.23+dfsg1-2
- 7.2.24+dfsg1-1
- 7.2.24+dfsg1-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:22.04:LTS
- Versions
- 3.04+git20210103-3build1
- 3.04+git20211021-1
- 3.04+git20211021-1ubuntu1
- 3.04+git20220201-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:24.04:LTS
- Versions
- 7.2.27+dfsg1-2
- 7.2.28-2
- 7.2.28-2.1build2
- 7.2.28-2.1build3
- 7.2.28-2.1build4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:24.04:LTS
- Versions
- 3.04+git20220601-1ubuntu1
- 3.04+git20220601-1ubuntu2
- 3.04+git20231213-1
- 3.04+git20240118-1
- 3.04+git20240124-1
- 3.04+git20240202-1
- 3.04+git20240202-1build1
- 3.04+git20240202-1build2
- 3.04+git20240202-1build3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:25.10
- Versions
- 7.2.30-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:25.10
- Versions
- 3.04+git20250304-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:26.10
- Versions
- 7.2.30-1build2
- 7.2.30-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:26.10
- Versions
- 3.04+git20260220-1
- 3.04+git20260220-1ubuntu1
- 3.04+git20260802-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:26.04:LTS
- Versions
- 7.2.30-1build1
- 7.2.30-1build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:26.04:LTS
- Versions
- 3.04+git20250304-1
- 3.04+git20250304-1build1
- 3.04+git20260220-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published