Xpdf Vulnerability Allows Denial of Service

CERT-Bund has published a security advisory (WID-SEC-2026-0786) detailing a denial-of-service vulnerability in the Xpdf PDF viewer, specifically affecting version 4.06. The vulnerability can be exploited by a local attacker and has a CVSS base score of 2.9. The advisory applies to Xpdf installations on Linux, UNIX, and Windows operating systems.

While this is a security advisory and not a regulatory mandate, organizations using Xpdf should be aware of this vulnerability. Users are advised to check for updated versions or apply any available mitigations once released by the vendor to prevent potential denial-of-service disruptions. The advisory does not specify a compliance deadline, but prompt review of security updates is recommended.