CVE-2023-3044

LOW

Xpdf - Divide By Zero

Title source: llm

Description

An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdf's text extraction code. This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate.

Scores

CVSS v3 3.3
EPSS 0.0004
EPSS Percentile 12.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Classification

CWE
CWE-369
Status published

Affected Products (1)

xpdfreader/xpdf < 4.05

Timeline

Published Jun 02, 2023
Tracked Since Feb 18, 2026