CVE-2023-3044

LOW

Xpdf < 4.05 - Denial of Service via Large PDF Page Size

Title source: llm

Description

An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdf's text extraction code. This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate.

References (2)

Core 2

Core References

Exploit, Third Party Advisory

https://github.com/baker221/poc-xpdf

View Exploit ZIP pw:eip

Vendor Advisory

https://www.xpdfreader.com/security-bug/CVE-2023-3044.html

Scores

CVSS v3 3.3

EPSS 0.0035

EPSS Percentile 26.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-369

Status published

Products (1)

xpdfreader/xpdf < 4.05

Published Jun 02, 2023

Tracked Since Feb 18, 2026