Integer Overflow

Xpdf is vulnerable to an integer overflow in JPXStream.cc...

Integer overflow

Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc...

CVE-2022-24107

CVE-2022-24107 affects Xpdf prior to 4.04, where an integer overflow check is missing in JPXStream.cc. Multiple connected sources (Ubuntu USN; Mageia, Gentoo GLSA) reference this CVE alongside others for Xpdf versions prior to 4.04 and suggest upgrading to 4.04 as the resolution. The issue is des...

CVE-2022-24107

Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc...

CVE-2022-24107

Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc...

PT-2022-16468 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: Xpdf versions prior to 4.04 Description: The issue is related to an integer overflow check in JPXStream.cc. This lack of check may lead to potential security issues. Recommendations: For versions prior to 4.04, update to version 4.04 or later...

CVE-2022-24107

Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc...

Xpdf memory misreference vulnerability (CNVD-2019-26658)

Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. A memory misreference vulnerability exists in the JPXStream::fillReadBuf function in JPXStream.cc in Xpdf 4.01.01. An attacker could exploit this vulnerability to cause a denial of...

CVE-2019-14294

An issue was discovered in Xpdf 4.01.01. There is a use-after-free in the function JPXStream::fillReadBuf at JPXStream.cc, due to an out of bounds read...

CVE-2019-14294

CVE-2019-14294 affects Xpdf 4.01.01. The issue is a use-after-free in JPXStream::fillReadBuf (JPXStream.cc) caused by an out-of-bounds read. Public sources describe this as a vulnerability in Xpdf with references to memory misreference and potential denial of service; there are notes about unpatc...

CVE-2018-8106

The JPXStream::readTilePartData function in JPXStream.cc in xpdf 4.00 allows attackers to launch denial of service heap-based buffer over-read and application crash via a specific pdf file, as demonstrated by pdftohtml...

Xpdf 'JPXStream::fillReadBuf' function null pointer dereference vulnerability

Xpdf is an open source PDF reader , it supports decoding LZW compressed format files as well as reading encrypted PDF files . A security vulnerability exists in the 'JPXStream::fillReadBuf' function in the JPXStream.cc file in Xpdf version 4.00. An attacker can exploit this vulnerability to cause...