CVE-2005-3626: Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, al...

Security readout for executives and security teams

This issue can make PDF-related software crash when it processes a specially crafted compressed PDF stream. The business risk is service interruption, especially where systems automatically inspect, print, convert, index, or preview untrusted PDFs. Exposure is most likely on legacy Unix/Linux systems or applications that still include old Xpdf-derived PDF parsing components and process PDFs from email, uploads, print queues, indexing, or document conversion workflows. Handle as a targeted reliability and legacy exposure issue, not a confirmed breach emergency. Prioritize systems that automatically process outside PDFs because crashes there can disrupt business services. Mitigation focus: Inventory systems with Xpdf, Poppler, CUPS, kpdf, gpdf, teTeX, pdftohtml, or libextractor components.; Check applicable vendor advisories for supported update guidance before applying fixes.; Prioritize PDF-processing services that ingest files from untrusted users or email..

Prepared

Jun 29, 2026, 15:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.