Xpdf · Xpdf · CVE-2025-3154
**Name of the Vulnerable Software and Affected Versions**
Xpdf versions 4.05 and earlier
**Description**
The issue is an out-of-bounds array write, triggered by an invalid `VerticesPerRow` value in a PDF shading dictionary.
**Recommendations**
For versions 4.05 and earlier, update to a version that fixes this issue.
As a temporary workaround, consider validating the `VerticesPerRow` value in PDF shading dictionaries to prevent invalid values from causing an out-of-bounds array write.