Xpdf CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW Xpdf CVE published 2026-10-26

CVE-2026-116671

CVE-2026-116671 is an infinite loop vulnerability in Xpdf 4.06 and earlier, caused by incorrect validation of the progression order field in JPEG 2000 images. This CVE was published on 2026-10-26T20:10:20.067Z and was last modified on 2026-11-02T21:32:43.357Z. The vulnerability could lead to denial-of-service attacks if exploited. Defenders responsible for Xpdf deployments should assess exposure and prior [truncated]