CVE-2023-3436

LowCVSS 3.3

Published: 27/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

7th percentile — higher than 7% of all known CVEs

Xpdf version 4.04 can deadlock when processing a PDF object stream whose 'Length' field is in another object stream.

Deadlocking may lead to service unavailability, impacting the organization's operational continuity.

It is recommended to upgrade to a newer version of Xpdf to avoid deadlock issues.

Original NVD description (English source)

Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream.