CVE-2022-38233

XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::readMCURow at /xpdf/Stream.cc...

Code injection

XPDF commit ffaf11c was discovered to contain a floating point exception FPE via DCTStream::decodeImage at /xpdf/Stream.cc...

CVE-2022-38230

XPDF commit ffaf11c was discovered to contain a floating point exception FPE via DCTStream::decodeImage at /xpdf/Stream.cc...

PT-2022-24297 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A heap-buffer overflow issue was discovered in XPDF, specifically via the DCTStream::transformDataUnit function at /xpdf/Stream.cc. Recommendations: At the moment, there is no information abou...

PT-2022-24304 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A segmentation violation was discovered in XPDF via the DCTStream::getChar function at /xpdf/Stream.cc. This issue affects the DCTStream::getChar function, which is located in the...

PT-2022-24300 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF version ffaf11c Description: A floating point exception FPE was discovered in XPDF via the DCTStream::decodeImage function at /xpdf/Stream.cc. Recommendations: For XPDF version ffaf11c, consider applying a patch or fix to resolve the...

XPDF 缓冲区错误漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF has a buffer error vulnerability that originates from DCTStream::getChar in /xpdf/Stream.cc contains a heap buffer overflow...

PT-2022-24298 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A heap-buffer overflow issue was discovered in XPDF, specifically via the DCTStream::readHuffSymDCTHuffTable function at /xpdf/Stream.cc. Recommendations: At the moment, there is no informatio...

XPDF 代码问题漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF commit id ffaf11c has a security vulnerability that stems from DCTStream::readMCURow in /xpdf/Stream.cc contains a segmentation violation...

PT-2022-24296 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A stack overflow issue was discovered in XPDF, specifically in the commit ffaf11c, via the asan memcpy function at asan interceptors memintrinsics.cpp. Recommendations: At the moment, there is...

PT-2022-7283 · Xpdf +1 · Xpdf +1

Name of the Vulnerable Software and Affected Versions: Xpdf version 4.0.4 Description: The issue exists due to insufficient input validation in the /xpdf/AcroForm.cc:538 component of the Xpdf software, which can lead to a segmentation violation. Exploitation of this issue may allow an attacker to...

CVE-2022-33108

XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...

UBUNTU-CVE-2022-33108

XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files...

CVE-2019-12957

In Xpdf 4.01.01, a buffer over-read could be triggered in FoFiType1C::convertToType1 in fofi/FoFiType1C.cc when the index number is larger than the charset array bounds. It can, for example, be triggered by sending a crafted PDF document to the pdftops tool. It allows an attacker to use a crafted...

CVE-2022-30775

xpdf 4.04 allocates excessive memory when presented with crafted input. This can be triggered by for example sending a crafted PDF document to the pdftoppm binary. It is most easily reproduced with the DCMAKECXXCOMPILER=afl-clang-fast++ option...

CVE-2022-30775

xpdf 4.04 allocates excessive memory when presented with crafted input. This can be triggered by for example sending a crafted PDF document to the pdftoppm binary. It is most easily reproduced with the DCMAKECXXCOMPILER=afl-clang-fast++ option...

Xpdf 缓冲区错误漏洞

Xpdf is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. Xpdf version 4.03 XRef.cc security vulnerability , the vulnerability stems from readXRefTable function in the presence of a heap buffer overflow . An...

Xpdf Stack Depletion Vulnerability

Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. A stack consumption vulnerability exists in the FoFiType1C::getOp function in Xpdf 4.02. The vulnerability stems from a failure to correctly reference a subroutine in a Type 1C font...

Xpdf Resource Management Error Vulnerability (CNVD-2021-02629)

Xpdf is a free PDF viewer and toolkit that includes a text extractor, image converter, HTML converter and more. Xpdf 4.02 has a resource management error vulnerability. The vulnerability stems from SplashOutputDev::endType3CharGfxState state SplashOutputDev.cc:3079 attempts to use the freed...

CVE-2020-25725

In Xpdf 4.02, SplashOutputDev::endType3CharGfxState state SplashOutputDev.cc:3079 is trying to use the freed t3GlyphStack-cache, which causes an heap-use-after-free problem. The codes of a previous fix for nested Type 3 characters wasn't correctly handling the case where a Type 3 char referred to...