LIVE · cybersecurity feed
Live wire
cve record

CVE-2026-4407

Published
CVSS—
Severitynone
WeaknessCWE-20
ExploitedNot in CISA KEV

Description

Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces.

References

← Back to the CVE Tracker

Our coverage of CVE-2026-4407

No stories yet. This page updates automatically when we publish reporting that references CVE-2026-4407.