CVE-2022-38227

XPDF commit ffaf11c was discovered to contain a stack overflow via asanmemcpy at asaninterceptorsmemintrinsics.cpp...

CVE-2022-35108

CVE-2022-35108 concerns SWFTools, where a segmentation fault was reported in DCTStream::getChar() within /xpdf/Stream.cc. The core vulnerability is triggered by this function in SWFTools, as documented across multiple sources (e.g., NVD/NVB, Red Hat, Ubuntu, OSV, Nessus plugin, and related adviso...

CVE-2022-35106

SWFTools commit 772e55a2 was discovered to contain a segmentation violation via FoFiTrueType::computeTableChecksumunsigned char, int at /xpdf/FoFiTrueType.cc...

CVE-2022-35104

CVE-2022-35104 concerns SWFTools with a heap-buffer overflow in DCTStream::reset() located in /xpdf/Stream.cc, triggered by commit 772e55a2. The vulnerability is documented across multiple feeds (e.g., Red Hat, Ubuntu, NVD, OSV) and corresponds to a local attack vector with medium overall CVSS v3...

CVE-2022-35104

SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via DCTStream::reset at /xpdf/Stream.cc...

PT-2022-24297 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A heap-buffer overflow issue was discovered in XPDF, specifically via the DCTStream::transformDataUnit function at /xpdf/Stream.cc. Recommendations: At the moment, there is no information abou...

PT-2022-24305 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF version ffaf11c Description: A global-buffer overflow issue was discovered in XPDF via the Lexer::getObjObject function at /xpdf/Lexer.cc. This issue can be exploited, potentially leading to unintended consequences. Recommendations: For...

CVE-2022-38231: Out-of-bounds Write

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::getChar at /xpdf/Stream.cc...

CVE-2022-38237: Out-of-bounds Write

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readScan at /xpdf/Stream.cc...

CVE-2022-38235: Improper Check for Unusual or Exceptional Conditions

XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar at /xpdf/Stream.cc...

PT-2022-24302 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A segmentation violation was discovered in XPDF via the DCTStream::readMCURow function at /xpdf/Stream.cc. Recommendations: At the moment, there is no information about a newer version that...

CVE-2022-38238: Out-of-bounds Write

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::lookChar at /xpdf/Stream.cc...

CVE-2022-38227: Out-of-bounds Write

XPDF commit ffaf11c was discovered to contain a stack overflow via asanmemcpy at asaninterceptorsmemintrinsics.cpp...

PT-2022-24306

Name of the Vulnerable Software and Affected Versions XPDF affected versions not specified Description A heap-buffer overflow was discovered in XPDF via the DCTStream::readScan function at /xpdf/Stream.cc. This issue affects XPDF commit ffaf11c. Recommendations At the moment, there is no...

XPDF 缓冲区错误漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF commit id ffaf11c has a security vulnerability that originates from DCTStream::readScan in /xpdf/Stream.cc contains a heap buffer overflow...

CVE-2022-38229: Out-of-bounds Write

XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readHuffSymDCTHuffTable at /xpdf/Stream.cc...

XPDF 代码问题漏洞

XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF commit id ffaf11c has a security vulnerability that stems from DCTStream::readMCURow in /xpdf/Stream.cc contains a segmentation violation...

PT-2022-24298 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A heap-buffer overflow issue was discovered in XPDF, specifically via the DCTStream::readHuffSymDCTHuffTable function at /xpdf/Stream.cc. Recommendations: At the moment, there is no informatio...

PT-2022-24307 · Xpdf · Xpdf

Name of the Vulnerable Software and Affected Versions: XPDF affected versions not specified Description: A heap-buffer overflow was discovered in XPDF via the DCTStream::lookChar function at /xpdf/Stream.cc. This issue is related to commit ffaf11c. Recommendations: At the moment, there is no...

SWFTools 缓冲区错误漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files from the individual developer Matthias Kramm. A security vulnerability exists in SWFTools that stems from a segmentation violation in FoFiTrueType::computeTableChecksumunsigned char, int in the file /xpdf/FoFiTrueType.cc...