CVE-2026-85458
LowCVSS 2.1Summary
Xpdf 4.06 and earlier versions contain a divide-by-zero vulnerability when a glyph in a Type 3 font has a zero height. This can lead to program crashes or unexpected behavior.
Risk Assessment
The vulnerability can be exploited to cause denial of service (crash) when processing specially crafted PDF files, potentially disrupting services that rely on Xpdf.
Recommendation
Update Xpdf to the latest available version that includes a fix for the divide-by-zero issue.
Other vulnerabilities in Xpdf
See all- CVE-2023-3436Low
Xpdf version 4.04 can deadlock when processing a PDF object stream whose 'Length' field is in another object stream.
- CVE-2023-3044Low
Xpdf has a vulnerability related to excessively large PDF page sizes, which can lead to a divide-by-zero error in the text extraction code. This issue was discovered during fuzz testing and is unlikely to occur in normal PDF files.
Original NVD description (English source)
Divide-by-zero in Xpdf 4.06 (and earlier), when a glyph in a Type 3 font has a zero height.