XRef::fetch in XRef.cc in Xpdf 4.00 allows remote attackers to cause a denial of service (stack consumption) via a crafted pdf file, related to AcroForm::scanField, as demonstrated by pdftohtml. NOTE: this might overlap CVE-2018-7453.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-16369.json"
[ { "events": [ { "introduced": "0" }, { "last_affected": "4.00" } ] } ]