3125 matches found
CVE-2022-38237
XPDF contains a heap-buffer overflow in DCTStream::readScan() triggered by commit ffaf11c in /xpdf/Stream.cc. Affects the XPDF component; the CVE-2022-38237 entry has a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, low attack complexity, no privileges required, but user interaction...
CVE-2022-38236
XPDF commit ffaf11c was discovered to contain a global-buffer overflow via Lexer::getObjObject at /xpdf/Lexer.cc...
CVE-2022-38236
CVE-2022-38236 relates to the XPDF project where commit ffaf11c introduces a global-buffer overflow via the function Lexer::getObj(Object*) in /xpdf/Lexer.cc. The vulnerability affects the XPDF code path associated with object parsing and can impact confidentiality, integrity, and availability as...
CVE-2022-38236
XPDF commit ffaf11c was discovered to contain a global-buffer overflow via Lexer::getObjObject at /xpdf/Lexer.cc...
CVE-2022-38235
XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar at /xpdf/Stream.cc...
CVE-2022-38235
XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar at /xpdf/Stream.cc...
CVE-2022-38235
CVE-2022-38235 concerns XPDF with a segmentation violation in DCTStream::getChar() implemented in /xpdf/Stream.cc. The provided documents confirm the affected component and root cause but do not include explicit patch/version details or a confirmed remediation in the supplied material. Exploitati...
CVE-2022-38234
XPDF vulnerability CVE-2022-38234 stems from commit ffaf11c, where Lexer::getObj(Object*) in /xpdf/Lexer.cc can cause a segmentation fault. Affected component is the XPDF project (PDF reader), with exploitation as a local threat and high impact to availability per CVSS metrics (AV:L, AC:L, PR:N, ...
CVE-2022-38234
XPDF commit ffaf11c was discovered to contain a segmentation violation via Lexer::getObjObject at /xpdf/Lexer.cc...
CVE-2022-38234
XPDF commit ffaf11c was discovered to contain a segmentation violation via Lexer::getObjObject at /xpdf/Lexer.cc...
CVE-2022-38233
CVE-2022-38233 concerns XPDF, where commit ffaf11c introduces a segmentation fault in DCTStream::readMCURow() within /xpdf/Stream.cc. The available connected sources consistently describe the issue as a segmentation violation in that function, without detailing affected versions, vendor advisorie...
CVE-2022-38233
XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::readMCURow at /xpdf/Stream.cc...
CVE-2022-38233
XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::readMCURow at /xpdf/Stream.cc...
CVE-2022-38231
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::getChar at /xpdf/Stream.cc...
CVE-2022-38231
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::getChar at /xpdf/Stream.cc...
CVE-2022-38231
CVE-2022-38231 describes a heap-buffer overflow in XPDF caused by the function DCTStream::getChar() in /xpdf/Stream.cc stemming from commit ffaf11c. The vulnerability impact is rated HIGH (CVSS 3.1: AV Local, AC Low, PR None, UI Required, S U, C I A H) with a base score of 7.8. Exploitation detai...
CVE-2022-38230
XPDF commit ffaf11c was discovered to contain a floating point exception FPE via DCTStream::decodeImage at /xpdf/Stream.cc...
CVE-2022-38230
XPDF commit ffaf11c was discovered to contain a floating point exception FPE via DCTStream::decodeImage at /xpdf/Stream.cc...
CVE-2022-38230
CVE-2022-38230 documents a vulnerability in XPDF where commit ffaf11c causes a floating point exception in DCTStream::decodeImage() within /xpdf/Stream.cc. The issue is described across multiple feeds (NVD, Red Hat, Debian tracker, OSV Ubuntu, etc.) with the core flaw being an FPE during image de...