High severity7.5NVD Advisory· Published Dec 26, 2020· Updated Jun 17, 2026

CVE-2020-35376

Description

Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp() function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Xpdf/Xpdfllm-fuzzy2 versions
<4.03+ 1 more
- (no CPE)range: <4.03
- cpe:2.3:a:xpdfreader:xpdf:4.02:*:*:*:*:*:*:*
Xpdf/Xpdfdescription
Fedoraproject/Fedora2 versions
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

forum.xpdfreader.com/viewtopic.phpnvdExploitVendor Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZUU5QG6SSVRTKZTR3A72LDRVZETEI63/nvd
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VLOYVJSM54IL6I5RY4QTJGRS7PIEG44X/nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000