CVE-2023-3436
CVE-2023-3436 is a low-severity vulnerability in Xpdfreader Xpdf with a CVSS 3.x base score of 3.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-667.
Key facts
- Severity: Low (CVSS 3.x base score 3.3)
- EPSS exploit prediction: 0% (7th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-667
- Affected product: Xpdfreader Xpdf
- Published:
- Last modified:
Description
Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream.
Frequently asked questions
- What is CVE-2023-3436?
- Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream.
- How severe is CVE-2023-3436?
- CVE-2023-3436 has a CVSS 3.x base score of 3.3, rated low severity. It is exploitable over local access with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is none, integrity none, and availability low.
- Is CVE-2023-3436 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (7th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2023-3436?
- CVE-2023-3436 affects Xpdfreader Xpdf. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2023-3436?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2023-3436 published?
- CVE-2023-3436 was published on 2023-06-27 and last updated on 2026-06-17.
References
Affected products (1)
- cpe:2.3:a:xpdfreader:xpdf:4.04:*:*:*:*:*:*:*
More vulnerabilities in Xpdfreader Xpdf
- CVE-2024-7868 — High (CVSS 8.2): In Xpdf 4.05 (and earlier), invalid header info in a DCT (JPEG) stream can lead to an uninitialized variable in the DCT…
- CVE-2022-38222 — High (CVSS 7.8): There is a use-after-free issue in JBIG2Stream::close() located in JBIG2Stream.cc in Xpdf 4.04. It can be triggered by…
- CVE-2022-38928 — High (CVSS 7.8): XPDF 4.04 is vulnerable to Null Pointer Dereference in FoFiType1C.cc:2393.
- CVE-2022-38171 — High (CVSS 7.8): Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in…
- CVE-2022-33108 — High (CVSS 7.8): XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files.
- CVE-2022-30524 — High (CVSS 7.8): There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor…
All CVEs affecting Xpdfreader Xpdf →
Other CWE-667 (Improper Locking) vulnerabilities
- CVE-2020-12658 — Critical (CVSS 9.8): gssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in gp_worker_main() in…
- CVE-2019-5886 — Critical (CVSS 9.8): An issue was discovered in ShopXO 1.2.0. In the application\install\controller\Index.php file, there is no validation…
- CVE-2026-43215 — High (CVSS 8.8): In the Linux kernel, the following vulnerability has been resolved: cifs: Fix locking usage for tcon fields We used…
- CVE-2026-31629 — High (CVSS 8.8): In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: add missing return after LLCP_CLOSED…
- CVE-2020-15674 — High (CVSS 8.8): Mozilla developers reported memory safety bugs present in Firefox 80. Some of these bugs showed evidence of memory…
- CVE-2021-1622 — High (CVSS 8.6): A vulnerability in the Common Open Policy Service (COPS) of Cisco IOS XE Software for Cisco cBR-8 Converged Broadband…