CVE-2025-2574 LOW

CVE-2025-2574: Out-of-bounds array write in Xpdf 4.05 due to incorrect integer overflow checking

Vendor Xpdf

Product Xpdf

Weakness CWE-190

Published March 20, 2025

Last update October 6, 2025

CVSS base score

2.1/10

Attack vector Local

Attack complexity High

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L

What the vulnerability does

01Description

Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code.

Key dates

March 20, 2025 CVE published

October 6, 2025 Record updated

External resources

Related vulnerabilities