XPDF commit ffaf11c exists to contain a heap-buffer overflow via DCTStream::getChar() at /xpdf/Stream.cc.
xpdf project xpdf 3.04