CVE-2025-2574
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Mar 20, 2025
CWE ID 787
Summary
CVE-2025-2574 is a critical vulnerability affecting Xpdf versions 4.05 and earlier. This issue stems from a flaw in the PostScript function interpreter code, which fails to properly check for integer overflows, leading to an out-of-bounds array write condition. An attacker can exploit this to execute arbitrary code on targeted systems, potentially leading to significant security risks and data breaches. Users are encouraged to update their Xpdf software to the latest version to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- D LINK SYSTEMS INC