← All advisories

Low severityNVD Advisory· Published Mar 18, 2026· Updated Jun 17, 2026

CVE-2026-4407

CVE-2026-4407

Description

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces.

Affected products

2

Xpdf/Xpdfllm-fuzzy2 versions
<=4.06+ 1 more
- (no CPE)range: <=4.06
- (no CPE)range: 4.06

Patches

Vulnerability mechanics

References

1

www.xpdfreader.com/security-bug/CVE-2026-4407.htmlnvd

News mentions

0

No linked articles in our index yet.