Linux Distros Unpatched Vulnerability : CVE-2022-38228

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc. CVE-2022-38228 Note that Nessus relies...

Linux Distros Unpatched Vulnerability : CVE-2020-25725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Xpdf 4.02, SplashOutputDev::endType3CharGfxState state SplashOutputDev.cc:3079 is trying to use the freed t3GlyphStack-cache, which causes an...

Linux Distros Unpatched Vulnerability : CVE-2022-38231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::getChar at /xpdf/Stream.cc. CVE-2022-38231 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2022-38235

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar at /xpdf/Stream.cc. CVE-2022-38235 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2020-24999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an invalid memory access in the function fprintf located in Error.cc in Xpdf 4.0.2. It can be triggered by sending a crafted PDF file to the pdftohtml...

Linux Distros Unpatched Vulnerability : CVE-2025-2574

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code. CVE-2025-2574 Note...

Linux Distros Unpatched Vulnerability : CVE-2022-41843

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xpdf 4.04. There is a crash in convertToType0 in fofi/FoFiType1C.cc, a different vulnerability than CVE-2022-38928. CVE-2022-41843 No...

Linux Distros Unpatched Vulnerability : CVE-2019-14291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xpdf 4.01.01. There is an out of bounds read in the function GfxPatchMeshShading::parse at GfxState.cc for typeA==6 case 3...

Linux Distros Unpatched Vulnerability : CVE-2023-2663

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Xpdf 4.04 and earlier, a PDF object loop in the page label tree leads to infinite recursion and a stack overflow. CVE-2023-2663 Note that Nessus relies on th...

Linux Distros Unpatched Vulnerability : CVE-2019-14294

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xpdf 4.01.01. There is a use-after-free in the function JPXStream::fillReadBuf at JPXStream.cc, due to an out of bounds read...

Linux Distros Unpatched Vulnerability : CVE-2019-16927

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xpdf 4.01.01 has an out-of-bounds write in the vertProfile part of the TextPage::findGaps function in TextOutputDev.cc, a different vulnerability than...

Linux Distros Unpatched Vulnerability : CVE-2022-24107

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc. CVE-2022-24107 Note that Nessus relies on the presence of the package as reported by the...

Linux Distros Unpatched Vulnerability : CVE-2022-38928

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XPDF 4.04 is vulnerable to Null Pointer Dereference in FoFiType1C.cc:2393. CVE-2022-38928 Note that Nessus relies on the presence of the package as reported by...

Linux Distros Unpatched Vulnerability : CVE-2020-35376

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp function...

Linux Distros Unpatched Vulnerability : CVE-2022-45586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack overflow vulnerability in function Dict::find in xpdf/Dict.cc in xpdf 4.04, allows local attackers to cause a denial of service. CVE-2022-45586 Note that...

Linux Distros Unpatched Vulnerability : CVE-2022-41842

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xpdf 4.04. There is a crash in gfseekIOFILE, long, int in goo/gfile.cc. CVE-2022-41842 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2022-43295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy at xpdf/Stream.cc:795. CVE-2022-43295 Note that Nessus relies on the...

Linux Distros Unpatched Vulnerability : CVE-2021-36493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in pdfimages in xpdf 4.03 allows attackers to crash the application via crafted command. CVE-2021-36493 Note that Nessus relies on...

Linux Distros Unpatched Vulnerability : CVE-2020-24996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an invalid memory access in the function TextString::TextString located in Catalog.cc in Xpdf 4.0.2. It can be triggered by for example sending a craft...

Linux Distros Unpatched Vulnerability : CVE-2024-3247

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Xpdf 4.05 and earlier, a PDF object loop in an object stream leads to infinite recursion and a stack overflow. CVE-2024-3247 Note that Nessus relies on the...