CVE-2024-4141

Publication date

2024-04-24 18:36:49

Family

GandC

State

PUBLISHED

Description

Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid character code in a Type 1 font. The root problem was a bounds check that was being optimized away by modern compilers.