{"id":"CVE-2026-85458","title":"Divide-by-zero in Xpdf 4.06 (and earlier), when a glyph in a Type 3 font has a zero height.","summary":"Divide-by-zero in Xpdf 4.06 (and earlier), when a glyph in a Type 3 font has a zero height.","severity":"medium","cwe":["CWE-369"],"published":"2026-09-03","updated":"2026-09-08","sourceUpdated":"2026-09-08T19:29:09.680","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-85458","references":[{"url":"https://www.xpdfreader.com/security-bug/CVE-2026-85458.html","label":"xpdf@xpdfreader.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85458.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-85458"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-85458"}],"tags":["nvd","csaf","vex","red-hat"],"epss":0.00099,"epssPercentile":0.00931,"ingestedAt":"2026-09-08T20:10:03.160Z","vendor":"Red Hat","cvss":4.7,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvssSource":"vendor","slug":"CVE-2026-85458","body":"## Overview\n\nDivide-by-zero in Xpdf 4.06 (and earlier), when a glyph in a Type 3 font has a zero height.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **Red Hat VEX** · updated 2026-09-08 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-85458.json)","depth":"sunlit","depthScore":26,"depthScoreParts":{"impact":25.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":202031,"id":"CVE-2026-85458","ts":1789400046411,"field":"cvss","old":null,"new":"4.7"},{"seq":202030,"id":"CVE-2026-85458","ts":1789400046411,"field":"severity","old":"none","new":"medium"},{"seq":200758,"id":"CVE-2026-85458","ts":1789397612543,"field":"cvss","old":"4.7","new":null},{"seq":200757,"id":"CVE-2026-85458","ts":1789397612543,"field":"severity","old":"medium","new":"none"},{"seq":199453,"id":"CVE-2026-85458","ts":1789395514095,"field":"cvss","old":null,"new":"4.7"},{"seq":199452,"id":"CVE-2026-85458","ts":1789395514095,"field":"severity","old":"none","new":"medium"},{"seq":198698,"id":"CVE-2026-85458","ts":1789392240185,"field":"cvss","old":"4.7","new":null},{"seq":198697,"id":"CVE-2026-85458","ts":1789392240185,"field":"severity","old":"medium","new":"none"},{"seq":197031,"id":"CVE-2026-85458","ts":1789384290949,"field":"cvss","old":null,"new":"4.7"},{"seq":197030,"id":"CVE-2026-85458","ts":1789384290949,"field":"severity","old":"none","new":"medium"},{"seq":194160,"id":"CVE-2026-85458","ts":1789378778382,"field":"cvss","old":"4.7","new":null},{"seq":194159,"id":"CVE-2026-85458","ts":1789378778382,"field":"severity","old":"medium","new":"none"},{"seq":192947,"id":"CVE-2026-85458","ts":1789376513484,"field":"cvss","old":null,"new":"4.7"},{"seq":192946,"id":"CVE-2026-85458","ts":1789376513484,"field":"severity","old":"none","new":"medium"},{"seq":191734,"id":"CVE-2026-85458","ts":1789373627482,"field":"cvss","old":"4.7","new":null},{"seq":191733,"id":"CVE-2026-85458","ts":1789373627482,"field":"severity","old":"medium","new":"none"},{"seq":190519,"id":"CVE-2026-85458","ts":1789369472325,"field":"cvss","old":null,"new":"4.7"},{"seq":190518,"id":"CVE-2026-85458","ts":1789369472325,"field":"severity","old":"none","new":"medium"},{"seq":189306,"id":"CVE-2026-85458","ts":1789368405495,"field":"cvss","old":"4.7","new":null},{"seq":189305,"id":"CVE-2026-85458","ts":1789368405495,"field":"severity","old":"medium","new":"none"},{"seq":188089,"id":"CVE-2026-85458","ts":1789365229147,"field":"cvss","old":null,"new":"4.7"},{"seq":188088,"id":"CVE-2026-85458","ts":1789365229147,"field":"severity","old":"none","new":"medium"},{"seq":186876,"id":"CVE-2026-85458","ts":1789363468201,"field":"cvss","old":"4.7","new":null},{"seq":186875,"id":"CVE-2026-85458","ts":1789363468201,"field":"severity","old":"medium","new":"none"},{"seq":185662,"id":"CVE-2026-85458","ts":1789361227370,"field":"cvss","old":null,"new":"4.7"},{"seq":185661,"id":"CVE-2026-85458","ts":1789361227370,"field":"severity","old":"none","new":"medium"},{"seq":184449,"id":"CVE-2026-85458","ts":1789358359866,"field":"cvss","old":"4.7","new":null},{"seq":184448,"id":"CVE-2026-85458","ts":1789358359866,"field":"severity","old":"medium","new":"none"},{"seq":182700,"id":"CVE-2026-85458","ts":1789354315553,"field":"cvss","old":null,"new":"4.7"},{"seq":182699,"id":"CVE-2026-85458","ts":1789354315553,"field":"severity","old":"none","new":"medium"},{"seq":181493,"id":"CVE-2026-85458","ts":1789353313700,"field":"cvss","old":"4.7","new":null},{"seq":181492,"id":"CVE-2026-85458","ts":1789353313700,"field":"severity","old":"medium","new":"none"},{"seq":180286,"id":"CVE-2026-85458","ts":1789350283203,"field":"cvss","old":null,"new":"4.7"},{"seq":180285,"id":"CVE-2026-85458","ts":1789350283203,"field":"severity","old":"none","new":"medium"},{"seq":179079,"id":"CVE-2026-85458","ts":1789348288403,"field":"cvss","old":"4.7","new":null},{"seq":179078,"id":"CVE-2026-85458","ts":1789348288403,"field":"severity","old":"medium","new":"none"},{"seq":177872,"id":"CVE-2026-85458","ts":1789346368460,"field":"cvss","old":null,"new":"4.7"},{"seq":177871,"id":"CVE-2026-85458","ts":1789346368460,"field":"severity","old":"none","new":"medium"},{"seq":176665,"id":"CVE-2026-85458","ts":1789343179701,"field":"cvss","old":"4.7","new":null},{"seq":176664,"id":"CVE-2026-85458","ts":1789343179701,"field":"severity","old":"medium","new":"none"},{"seq":174782,"id":"CVE-2026-85458","ts":1789334874132,"field":"cvss","old":null,"new":"4.7"},{"seq":174781,"id":"CVE-2026-85458","ts":1789334874132,"field":"severity","old":"none","new":"medium"},{"seq":173577,"id":"CVE-2026-85458","ts":1789333685372,"field":"cvss","old":"4.7","new":null},{"seq":173576,"id":"CVE-2026-85458","ts":1789333685372,"field":"severity","old":"medium","new":"none"},{"seq":172391,"id":"CVE-2026-85458","ts":1789331091470,"field":"cvss","old":null,"new":"4.7"},{"seq":172390,"id":"CVE-2026-85458","ts":1789331091470,"field":"severity","old":"none","new":"medium"},{"seq":171205,"id":"CVE-2026-85458","ts":1789328777258,"field":"cvss","old":"4.7","new":null},{"seq":171204,"id":"CVE-2026-85458","ts":1789328777258,"field":"severity","old":"medium","new":"none"},{"seq":170000,"id":"CVE-2026-85458","ts":1789327195607,"field":"cvss","old":null,"new":"4.7"},{"seq":169999,"id":"CVE-2026-85458","ts":1789327195607,"field":"severity","old":"none","new":"medium"}]}