The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade cupsUpgrade libextractorUpgrade xpdfUpgrade poppler | Jul 30, 2024 | Dec 31, 2005 |
| Gentoo Linux | — | Upgrade app-office/kword.Upgrade media-libs/libextractor.Upgrade kde-base/kpdf.Upgrade app-text/pdftohtml.Upgrade kde-base/kdegraphics.Upgrade app-text/xpdf.Upgrade app-text/gpdf.Upgrade app-office/koffice.Upgrade app-text/poppler. | Oct 30, 2017 | Dec 31, 2005 |
| Suse | — | Upgrade libcupsimage2Upgrade cups-ddkUpgrade cups-clientUpgrade cupsUpgrade libcups2Upgrade cups-develUpgrade cups-config | Sep 1, 2026 | Jun 28, 2013 |
| Ubuntu | — | Upgrade cupsysUpgrade kwordUpgrade xpdf-utils | Nov 8, 2024 | Dec 31, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub