cve/2024/CVE-2024-3248.md

### [CVE-2024-3248](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3248)
![](https://img.shields.io/static/v1?label=Product&message=Xpdf&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%3C%3D%204.05%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-674%20Uncontrolled%20Recursion&color=brighgreen)

### Description

In Xpdf 4.05 (and earlier), a PDF object loop in the attachments leads to infinite recursion and a stack overflow.

### POC

#### Reference
- https://forum.xpdfreader.com/viewtopic.php?t=43657
- https://forum.xpdfreader.com/viewtopic.php?t=43657

#### Github
No PoCs found on GitHub currently.