CVE-2023-3044CWE-369

Divide-by-zero in Xpdf 4.04 due to very large page size

Low · published June 2, 2023

CVSS v3.1
3.3
EPSS
0%
Percentile
26.8
In the wild
Unconfirmed
What it is

An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdf's text extraction code.

This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00345 · 26.8th percentile
Weakness
CWE-369 · Divide By Zero
Published
2023-06-02T22:32Z
EPSS history
Timeline
  • 02 JUN 22:32Z
    Divide-by-zero in Xpdf 4.04 due to very large page size
    cvelistv5