Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/xpdf@4.01.01-1
purl pkg:alpm/archlinux/xpdf@4.01.01-1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (7)
Vulnerability Summary Aliases
VCID-bpmu-gg3s-buh5 A large loop in JBIG2Stream::readSymbolDictSeg in xpdf 4.00 allows an attacker to cause denial of service via a specific file due to inappropriate decoding. CVE-2018-7173
VCID-dgeq-w49g-eydx A NULL pointer dereference in JPXStream::fillReadBuf in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml. CVE-2018-7452
VCID-eyyu-rn4g-p3gf An out-of-bounds read in JPXStream::readTilePart in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml. CVE-2018-7455
VCID-fzqk-draz-2kad An issue was discovered in xpdf 4.00. An infinite loop in XRef::Xref allows an attacker to cause denial of service because loop detection exists only for tables, not streams. CVE-2018-7174
VCID-vtzx-euz7-vygu Multiple vulnerabilities have been found in Xpdf, the worst of which could result in denial of service. CVE-2018-7453
VCID-yguc-b2n2-3bha An issue was discovered in xpdf 4.00. A NULL pointer dereference in readCodestream allows an attacker to cause denial of service via a JPX image with zero components. CVE-2018-7175
VCID-z7g1-26q1-sbfs A NULL pointer dereference in XFAForm::scanFields in XFAForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file, as demonstrated by pdftohtml. CVE-2018-7454

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T18:27:21.486237+00:00 Arch Linux Importer Fixing VCID-bpmu-gg3s-buh5 https://security.archlinux.org/AVG-640 38.0.0
2026-04-01T18:27:21.464541+00:00 Arch Linux Importer Fixing VCID-fzqk-draz-2kad https://security.archlinux.org/AVG-640 38.0.0
2026-04-01T18:27:21.442720+00:00 Arch Linux Importer Fixing VCID-yguc-b2n2-3bha https://security.archlinux.org/AVG-640 38.0.0
2026-04-01T18:27:21.422063+00:00 Arch Linux Importer Fixing VCID-dgeq-w49g-eydx https://security.archlinux.org/AVG-640 38.0.0
2026-04-01T18:27:21.401375+00:00 Arch Linux Importer Fixing VCID-vtzx-euz7-vygu https://security.archlinux.org/AVG-640 38.0.0
2026-04-01T18:27:21.378833+00:00 Arch Linux Importer Fixing VCID-z7g1-26q1-sbfs https://security.archlinux.org/AVG-640 38.0.0
2026-04-01T18:27:21.355606+00:00 Arch Linux Importer Fixing VCID-eyyu-rn4g-p3gf https://security.archlinux.org/AVG-640 38.0.0