CVE-2019-9588: Glyphandcog Xpdfreader

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

There is an Invalid memory access in gAtomicIncrement() located at GMutex.h in Xpdf 4.01. It can be triggered by sending a crafted pdf file to (for example) the pdftops binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.

Affected products

• Glyphandcog Xpdfreader: version 4.01 only

Published 2019-03-06. Last modified 2026-06-17.