CVE-2024-7867CWE-190CWE-369

Integer overflow and divide-by-zero in Xpdf 4.05 due to bogus page box coordinates

Low · published August 15, 2024

CVSS v4.0
2.1
EPSS
0%
Percentile
11.0
In the wild
Unconfirmed
What it is

In Xpdf 4.05 (and earlier), very large coordinates in a page box can cause an integer overflow and divide-by-zero.

The record
Technical detail
CVSS v4.0
2.1 · LOW
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00213 · 11.0th percentile
Weaknesses
CWE-190 · Integer Overflow or Wraparound; CWE-369 · Divide By Zero
Published
2024-08-15T20:06Z
EPSS history
Timeline
  • 15 AUG 20:06Z
    Integer overflow and divide-by-zero in Xpdf 4.05 due to bogus page box coordinates
    cvelistv5