VULNERABILITY INTELLIGENCE

CVE-2026-4407

EPSS probability0.15%

CISA KEVNot currently listed

Published2026-03-18

Last modified2026-06-17

Description

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces.