← All advisories

Low severityNVD Advisory· Published Apr 2, 2025· Updated Jun 17, 2026

CVE-2025-3154

CVE-2025-3154

Description

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid VerticesPerRow value in a PDF shading dictionary.

Affected products

4

Xpdf/Xpdfinferred2 versions
<=4.05+ 1 more
- (no CPE)range: <=4.05
- (no CPE)range: <=4.05
osv-coords2 versions
pkg:rpm/suse/poppler&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5 pkg:rpm/suse/poppler-qt&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5
< 0.43.0-16.67.1+ 1 more
- (no CPE)range: < 0.43.0-16.67.1
- (no CPE)range: < 0.43.0-16.67.1

Patches

Vulnerability mechanics

References

1

www.xpdfreader.com/security-bug/CVE-2025-3154.htmlnvd

News mentions

0

No linked articles in our index yet.