How many CVEs does xpdf have?

xpdf has 47 published CVE records since 2000, including 5 in the last two years.

How many xpdf CVEs are in CISA KEV?

None of xpdf's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which xpdf products have the most CVEs?

The xpdf products with the most published CVEs are xpdf.

What are the most common weakness types in xpdf CVEs?

xpdf's CVEs most often map to these CWE weakness types: CWE-674 (Uncontrolled Recursion), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-787 (Out-of-bounds Write), CWE-369 (Divide By Zero).

Are there public exploits for xpdf vulnerabilities?

Yes — 15 of xpdf's CVEs have a known public exploit.

How many critical xpdf vulnerabilities are there?

xpdf has 8 critical and 13 high-severity CVEs.

What is the average severity of xpdf CVEs?

The average CVSS base score across xpdf's scored CVEs is 5.9.

RadicalNotion.AI

Log in Create an account

47 CVEs

xpdf Vulnerabilities

Name: xpdf vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for xpdf.

47

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

15

Public exploits

PoC or exploit code

5.9

Avg CVSS

2000–2026

Overview

xpdf has 47 published CVE records since 2000, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 15 have a known public exploit. The average CVSS base score across scored CVEs is 5.9.

Security scorecard

A quick read on xpdf's vulnerability posture, as a share of its 47 published CVEs.

Average CVSS: 5.9
Critical / high: 45%
Actively exploited (KEV): 0%
Public exploit available: 32%
Patch available: 60%

Severity and exploitation

How the CVSS severity of xpdf's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical8

High13

Medium14

Low12

In CISA’s Known Exploited Vulnerabilities catalog

0

None of xpdf's CVEs are currently listed in CISA's KEV catalog.

Public exploits

15

15 of xpdf's CVEs have a known public exploit available.

Most affected products

The xpdf products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

xpdf47 CVEs

Common weakness types

The CWE weakness categories most often found in xpdf CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish xpdf CVE records.

Disclosure activity by year

How many xpdf CVEs were published each year.

2006

8

2007

4

2009

1

2019

1

2023

5

2024

10

2025

3

2026

2

Latest xpdf CVEs

The most recently disclosed vulnerabilities affecting xpdf.

Divide-by-zero in Xpdf 4.06 due to zero-height Type 3 glyph
CWE-369
Low · CVSS 2.1
EPSS 0.1%2026-09-03
Out-of-bounds array write in Xpdf 4.06 due to missing validation
CWE-20
Low · CVSS 2.1
EPSS 0.1%2026-03-18
Stack overflow in Xpdf 4.05 due to object loop in PDF CMap
CWE-674
Low · CVSS 2.1
EPSS 0.2%2025-10-16
Out-of-bounds array write due to invalid VerticesPerRow in Xpdf 4.05
CWE-787
Low · CVSS 2.1
EPSS 0.2%2025-04-02
Out-of-bounds array write in Xpdf 4.05 due to incorrect integer overflow checking
CWE-190
Low · CVSS 2.1
EPSS 0.2%2025-03-20
Uninitialized variable in Xpdf 4.05 due to invalid JPEG header
CWE-457
Low · CVSS 2.1
EPSS 0.4%2024-08-15
Low vulnerability · 2024-08-15
CWE-369
Low · CVSS 2.1
EPSS 0.2%2024-08-15
Stack overflow in Xpdf 4.05 due to object loop in PDF pattern
CWE-674
Low · CVSS 2.1
EPSS 0.2%2024-08-15
Out-of-bounds array write in Xpdf 4.05 due to missing object type check
CWE-787
Low · CVSS 2.1
EPSS 0.2%2024-05-15
Medium vulnerability · 2024-05-06
CWE-674
Medium · CVSS 5.5
EPSS 0.2%2024-05-06
Medium vulnerability · 2024-04-24
CWE-787
Medium · CVSS 5.5
EPSS 0.2%2024-04-24
Medium vulnerability · 2024-04-17
CWE-787
Medium · CVSS 5.5
EPSS 0.2%2024-04-17

Get an alert for each new xpdf CVE, with AI-written analysis and remediation steps.

Monitor xpdf CVEs

Other vendors

CVE counts for other vendors.

microsoft42,015 CVEs linux25,264 CVEs Google17,495 CVEs Apple15,508 CVEs Oracle13,348 CVEs Debian10,234 CVEs IBM9,452 CVEs Red Hat8,588 CVEs

Browse all vendors

Frequently asked questions

Common questions about xpdf vulnerabilities.

How many CVEs does xpdf have?: xpdf has 47 published CVE records since 2000, including 5 in the last two years.
How many xpdf CVEs are in CISA KEV?: None of xpdf's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which xpdf products have the most CVEs?: The xpdf products with the most published CVEs are xpdf.
What are the most common weakness types in xpdf CVEs?: xpdf's CVEs most often map to these CWE weakness types: CWE-674 (Uncontrolled Recursion), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-787 (Out-of-bounds Write), CWE-369 (Divide By Zero).
Are there public exploits for xpdf vulnerabilities?: Yes — 15 of xpdf's CVEs have a known public exploit.
How many critical xpdf vulnerabilities are there?: xpdf has 8 critical and 13 high-severity CVEs.
What is the average severity of xpdf CVEs?: The average CVSS base score across xpdf's scored CVEs is 5.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track xpdf vulnerabilities

Get an alert for each new xpdf CVE, with AI-written analysis and remediation steps.

Create an account See pricing