https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T10:44:42.035470+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-02629 cnvd-2021-02629 2026-10-20T10:44:42.040713+00:00 cnvd-2021-02629 https://cve.radiocsirt.org/vuln/euvd-2026-45730 EUVD-2026-45730 2026-10-20T10:44:42.040755+00:00 EUVD-2026-45730 https://cve.radiocsirt.org/vuln/fkie_cve-2020-25725 fkie_cve-2020-25725 2026-10-20T10:44:42.040776+00:00

In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to use the freed `t3GlyphStack->cache`, which causes an `heap-use-after-free` problem. The codes of a previous fix for nested Type 3 characters wasn't correctly handling the case where a Type 3 char referred to another char in the same Type 3 font.

 https://cve.radiocsirt.org/vuln/ghsa-r454-8j2h-fwqp GHSA-r454-8j2h-fwqp 2026-10-20T10:44:42.040816+00:00

In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to use the freed `t3GlyphStack->cache`, which causes an `heap-use-after-free` problem. The codes of a previous fix for nested Type 3 characters wasn't correctly handling the case where a Type 3 char referred to another char in the same Type 3 font.

 https://cve.radiocsirt.org/vuln/gsd-2020-25725 gsd-2020-25725 2026-10-20T10:44:42.040843+00:00 gsd-2020-25725 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25725 UBUNTU-CVE-2020-25725 2026-10-20T10:44:42.040862+00:00

Affected: Ubuntu:16.04:LTS: ipe, Ubuntu:18.04:LTS: ipe, Ubuntu:20.04:LTS: ipe, Ubuntu:22.04:LTS: ipe, Ubuntu:24.04:LTS: ipe, Ubuntu:25.10: ipe, Ubuntu:26.10: ipe, Ubuntu:26.04:LTS: ipe

In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to use the freed `t3GlyphStack->cache`, which causes an `heap-use-after-free` problem. The codes of a previous fix for nested Type 3 characters wasn't correctly handling the case where a Type 3 char referred to another char in the same Type 3 font.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1036 WID-SEC-W-2024-1036 — xpdf: Schwachstelle ermöglicht Denial of Service 2026-10-20T10:44:42.040910+00:00

Ein lokaler Angreifer kann eine Schwachstelle in xpdf ausnutzen, um einen Denial of Service Angriff durchzuführen.