CVE-2018-8100

7.8 highEPSS 0.9%

High (7.8) in xpdfreader xpdf. EPSS 0.9% chance of exploitation in the next 30 days.

The JPXStream::readTilePart function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a specific pdf file, as demonstrated by pdftohtml.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2018-03-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

xpdfreader:xpdf

References

https://forum.xpdfreader.com/viewtopic.php?f=3&t=652
https://forum.xpdfreader.com/viewtopic.php?f=3&t=652

Check your stack JSON