Description
There is a stack consumption issue in md5Round1() located in Decrypt.cc in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. This is related to Catalog::countPageTree.
References (2)
Core 2
Core References
Exploit, Third Party Advisory x_refsource_misc
https://forum.xpdfreader.com/viewtopic.php?f=3&t=41263
Exploit, Third Party Advisory x_refsource_misc
https://research.loginsoft.com/bugs/stack-based-buffer-overflow-vulnerability-in-function-md5round1-xpdf-4-01/
Scores
CVSS v3
7.8
EPSS
0.0120
EPSS Percentile
64.2%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-400
Status
published
Products (1)
glyphandcog/xpdfreader
4.01
Published
Mar 06, 2019
Tracked Since
Feb 18, 2026