Xpdf Out-of-Bounds Array Write Vulnerability in Shading Dictionary Processing

An out-of-bounds array write vulnerability has been identified in Xpdf versions through 4.05. This issue is triggered by an invalid VerticesPerRow value in a PDF shading dictionary, specifically within the GfxGouraudTriangleShading::parse() function.

Impact

Exploitation of this vulnerability leads to an out-of-bounds write, which can potentially be exploited to execute arbitrary code or cause a denial-of-service condition.

Remediation

Users can upgrade to Xpdf version 4.06 to address this vulnerability.