CVE-2023-3044: Xpdfreader Xpdf

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdf's text extraction code. This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate.

Affected products

• Xpdfreader Xpdf: before 4.05 (fixed in 4.05)

Published 2023-06-02. Last modified 2026-06-17.