CVE-2018-18650

An issue was discovered in Xpdf 4.00. XRef::readXRefStream in XRef.cc allows attackers to launch a denial of service Integer Overflow via a crafted /Size value in a pdf file, as demonstrated by pdftohtml. This is mainly caused by the program attempting a malloc operation for a large amount of...

PT-2022-36994

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details include a crash type of Heap-buffer-overflow READ 8, with a crash state...

poppler:doc_fuzzer: Use-of-uninitialized-value in XRef::readXRefStreamSection

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=4738828922912768 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...

CVE-2022-27135

xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc. An attacker can exploit this bug to cause a Denial of Service Segmentation fault or other unspecified effects by sending a crafted PDF file to the pdftoppm binary...

poppler:doc_fuzzer: Use-of-uninitialized-value in XRef::readXRefStreamSection

Project: https://anongit.freedesktop.org/git/poppler/poppler.git https://gitlab.freedesktop.org/poppler/poppler.git https://gitlab.freedesktop.org/ceyhunalp/poppler.git Detailed Report: https://oss-fuzz.com/testcase?key=5919441131536384 Project: poppler Fuzzing Engine: libFuzzer Fuzz Target:...

PT-2022-36831

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow WRITE 8 crash has been reported. The crash involves the functions read xref stream entries, pdfi process xref stream, and pdfi read...

ghostscript:gstoraster_fuzzer: Heap-buffer-overflow in read_xref_stream_entries

Detailed Report: https://oss-fuzz.com/testcase?key=5400921247449088 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x631000060840 Crash State:...

PT-2022-36653

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the functions sgets, pdfi read bytes, and read xref entry...

PT-2021-28000

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the functions read xref, pdfi read xref, and pdfi set...

PT-2021-27990

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves functions such as read xref stream entries, pdfi process xref stream, and pd...

ghostscript:gstoraster_fuzzer: Crash in read_xref_stream_entries

Detailed Report: https://oss-fuzz.com/testcase?key=5891932457402368 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x63380006a598 Crash State: readxrefstreamentries...

PT-2021-27936

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow crash. Technical details about the crash include the functions pdfi repair file, pdfi read xref stream dict,...

PT-2021-27943

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-underflow WRITE 1 crash type. The crash state involves functions such as read xref, pdfi read xref, and pdfi set inp...

PDF2JSON buffer overflow vulnerability

PDF2JSON is a Java-based code library that interacts PDF files with Json files. PDF2JSON has a buffer overflow vulnerability hole, which stems from a stack buffer overflow found in the component XRef::fetch. No detailed vulnerability details are currently available...

CVE-2020-23878

pdf2json v0.71 was discovered to contain a stack buffer overflow in the component XRef::fetch...

CVE-2020-23878

pdf2json v0.71 was discovered to contain a stack buffer overflow in the component XRef::fetch...

Stack overflow

pdf2json v0.71 was discovered to contain a stack buffer overflow in the component XRef::fetch...

CVE-2020-23878

pdf2json v0.71 was discovered to contain a stack buffer overflow in the component XRef::fetch...

CVE-2020-23878

pdf2json v0.71 was discovered to contain a stack buffer overflow in the component XRef::fetch...

CVE-2020-23878

Summary: CVE-2020-23878 affects pdf2json v0.71, with a stack buffer overflow in the XRef::fetch function. The vulnerability is documented across multiple feeds as a buffer overflow in a Java-based PDF-to-JSON library (pdf2json). Impact: CVSS metrics indicate high to critical severity (CVSS‑2.0: b...