Lucene search

K
cvelistMitreCVELIST:CVE-2022-30524
HistoryMay 09, 2022 - 6:00 p.m.

CVE-2022-30524

2022-05-0918:00:09
mitre
www.cve.org
2
xpdf 4.0.4
textline class
memory access

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

51.2%

There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by (for example) sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

51.2%