Xpdf 'DCTStream::getBlock' function out-of-bounds read vulnerability

Xpdf is an open source PDF reader developed by Foo Labs, which supports decoding LZW compressed format files and reading encrypted PDF files. Xpdf 4.00 version of the Stream.cc file in the 'DCTStream::getBlock' function has an out-of-bounds read vulnerability. A remote attacker can exploit this...

CVE-2018-18459

The function DCTStream::getBlock in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

UBUNTU-CVE-2018-18459

The function DCTStream::getBlock in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

CVE-2018-18459

The function DCTStream::getBlock in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

Null pointer dereference

The function DCTStream::getBlock in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

DEBIAN-CVE-2018-18459

The function DCTStream::getBlock in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

CVE-2018-18459

The function DCTStream::getBlock in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

PT-2018-14473

Name of the Vulnerable Software and Affected Versions Xpdf version 4.00 Description The issue allows remote attackers to cause a denial of service via a crafted pdf file. This is due to a NULL pointer dereference in the DCTStream::getBlock function in Stream.cc. Recommendations For Xpdf version...

CVE-2018-18459: NULL Pointer Dereference

The function DCTStream::getBlock in Stream.cc in Xpdf 4.00 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted pdf file, as demonstrated by pdftoppm...

gdal/gdal_sdts_fuzzer: Heap-buffer-overflow in SDTSRasterReader::GetBlock

Project: https://github.com/OSGeo/gdal.git Detailed report: https://oss-fuzz.com/testcase?key=5052815123677184 Project: gdal Fuzzer: libFuzzergdalsdtsfuzzer Fuzz target binary: gdalsdtsfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...