CVE-2023-26930: Buffer Overflow
Published Apr 26, 2023
·Updated
DISPUTED Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc function. NOTE: Vendor states “it's an expected abort on out-of-memory error.”
Affected Software
1 affected component
Xpdfreader Xpdf=4.04
Event History
Apr 26, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Disputed
07:15 PM
Frequently Asked Questions
1
What is the vulnerability ID for this XPDF vulnerability?
The vulnerability ID is CVE-2023-26930.
2
What is the severity of CVE-2023-26930?
The severity of CVE-2023-26930 is medium with a CVSS score of 5.5.
3
What is the affected software for CVE-2023-26930?
The affected software is XPDF v.4.04 by Xpdfreader.
4
How does CVE-2023-26930 work?
CVE-2023-26930 is a buffer overflow vulnerability that allows an attacker to cause a Denial of Service by exploiting the PDFDoc malloc in the pdftotext.cc function.
5
Is there a fix available for CVE-2023-26930?
At the moment, there is no official fix available for CVE-2023-26930. However, the vendor states that the issue is an expected abort on out-of-memory error.