Le Journal

Un attaquant peut forcer la lecture à une adresse mémoire invalide de Xpdf, via DCT Header Info, afin de mener un déni de service, ou d’obtenir des informations sensibles. Plus d'information sur : https://vigilance.fr/vulnerabilite/Xpdf-lecture-de-memoire-hors-plage-prevue-via-DCT-Header-Info-48788

...

...

...

An attacker can trigger a buffer overflow of Xpdf, via PostScript Interpreter Code, in order to trigger a denial of service, and possibly to run code. - Security Vulnerability

An attacker can read a file of HashiCorp go-getter, via Subdirectory Download, in order to obtain sensitive information. - Security Vulnerability

An attacker can trigger a buffer overflow of Xpdf, dated 16/11/2025, in order to trigger a denial of service, and possibly to run code. - Security Vulnerability

An attacker can trigger a buffer overflow of Xpdf, via AcroForm Field Reference, in order to trigger a denial of service, and possibly to run code. - Security Vulnerability