CVE-2023-3044

published 2023-06-02

CVE-2023-3044: An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdf's text extraction code. This is…

low 3.3 CVSS 3.1

AV L AC L PR N UI R S U C N I N A L

An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdf's text extraction code.

This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
debian	xpdf	—	—
xpdfreader	xpdf	< 4.05	4.05

CVSS provenance

nvd v3.1 3.3 LOW CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

osv 7.8 HIGH

CWE-369