Vulnetix
Try Vulnetix Request Demo
CVE-2019-16115 PUBLISHED

In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used by GfxAxialShading::getColor. It can, for example, be triggered by sending a crafted PDF document to the pdftoppm tool. It allows an attacker to use a crafted PDF file to cause Denial of Service or possibly unspecified other impact.

EPSS 0.18% · 39.4th percentile

Risk Scores

EPSS Score
0.18%
39.4th percentile

Affected Products

VendorProductVersions
Ubuntu:24.04:LTSipe7.2.27+dfsg1-2, 7.2.28-2.1build4, 7.2.28-2.1build3
Ubuntu:20.04:LTSipe7.2.13-2, 7.2.13-2build1, 0
Ubuntu:16.04:LTSipe7.1.4-2.1, 7.1.8-1, 7.1.10-1
Ubuntu:25.10ipe7.2.30-1build1, 0
Ubuntu:22.04:LTSipe7.2.23+dfsg1-2, 0, 7.2.24+dfsg1-1build1
Ubuntu:18.04:LTSipe7.2.7-3, 7.2.7-2, 0

Timeline

References

Open in Interactive Console →