Medium severity5.5NVD Advisory· Published Feb 24, 2018· Updated Jun 17, 2026

CVE-2018-7453

Description

Infinite recursion in AcroForm::scanField in AcroForm.cc in xpdf 4.00 allows attackers to launch denial of service via a specific pdf file due to lack of loop checking, as demonstrated by pdftohtml.

Affected products

Oracle Corporation/Xpdfinferred
Range: = 4.00
Xpdf/Xpdfllm-create
Range: =4.00

Patches

Vulnerability mechanics

References

forum.xpdfreader.com/viewtopic.phpnvdIssue TrackingVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000