CVE-2010-3704: Foolabs Xpdf

Medium severity, CVSS 6.8. EPSS: 3.6% chance of exploitation in the next 30 days.

The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, kdegraphics, and possibly other products allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with a crafted PostScript Type1 font that contains a negative array index, which bypasses input validation and triggers memory corruption.

Affected products

• Foolabs Xpdf: version 0.5a only; version 0.7a only; version 0.91a only; version 0.91b only; version 0.91c only; version 0.92a only; …
• Glyphandcog Xpdfreader: up to and including 3.02; version 0.2 only; version 0.3 only; version 0.4 only; version 0.5 only; version 0.6 only; …
• Kde Kdegraphics: any version
• Poppler Poppler: version 0.8.7 only; version 0.9.0 only; version 0.9.1 only; version 0.9.2 only; version 0.9.3 only; version 0.10.0 only; …

Published 2010-11-05. Last modified 2026-06-16.