CVE-2022-38233

CVE-2022-38233 concerns XPDF, where commit ffaf11c introduces a segmentation fault in DCTStream::readMCURow() within /xpdf/Stream.cc. The available connected sources consistently describe the issue as a segmentation violation in that function, without detailing affected versions, vendor advisorie...

CVE-2022-38228

CVE-2022-38228 affects XPDF. The root cause is a heap-buffer overflow in DCTStream::transformDataUnit, located in /xpdf/Stream.cc. The CVE entry (CVE-2022-38228) lists a high-severity impact (CVSS: 7.8, HIGH) with LOCAL attack vector, user interaction required, and confidentiality/ integrity/avai...

CVE-2022-38231

CVE-2022-38231 describes a heap-buffer overflow in XPDF caused by the function DCTStream::getChar() in /xpdf/Stream.cc stemming from commit ffaf11c. The vulnerability impact is rated HIGH (CVSS 3.1: AV Local, AC Low, PR None, UI Required, S U, C I A H) with a base score of 7.8. Exploitation detai...

CVE-2022-38236

CVE-2022-38236 relates to the XPDF project where commit ffaf11c introduces a global-buffer overflow via the function Lexer::getObj(Object*) in /xpdf/Lexer.cc. The vulnerability affects the XPDF code path associated with object parsing and can impact confidentiality, integrity, and availability as...

CVE-2022-38235

CVE-2022-38235 concerns XPDF with a segmentation violation in DCTStream::getChar() implemented in /xpdf/Stream.cc. The provided documents confirm the affected component and root cause but do not include explicit patch/version details or a confirmed remediation in the supplied material. Exploitati...

CVE-2022-38237

XPDF contains a heap-buffer overflow in DCTStream::readScan() triggered by commit ffaf11c in /xpdf/Stream.cc. Affects the XPDF component; the CVE-2022-38237 entry has a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, low attack complexity, no privileges required, but user interaction...

CVE-2022-38234

XPDF vulnerability CVE-2022-38234 stems from commit ffaf11c, where Lexer::getObj(Object*) in /xpdf/Lexer.cc can cause a segmentation fault. Affected component is the XPDF project (PDF reader), with exploitation as a local threat and high impact to availability per CVSS metrics (AV:L, AC:L, PR:N, ...

CVE-2022-38238

XPDF contains a heap-buffer overflow in DCTStream::lookChar() at /xpdf/Stream.cc due to commit ffaf11c, identified as CVE-2022-38238. The vulnerability affects XPDF and yields HIGH impact (confidentiality, integrity, availability) with a LOCAL attack vector and user interaction required (cvss3.1:...

CVE-2022-38230

CVE-2022-38230 documents a vulnerability in XPDF where commit ffaf11c causes a floating point exception in DCTStream::decodeImage() within /xpdf/Stream.cc. The issue is described across multiple feeds (NVD, Red Hat, Debian tracker, OSV Ubuntu, etc.) with the core flaw being an FPE during image de...

CVE-2022-38229

XPDF contains a heap-buffer overflow in DCTStream::readHuffSym(DCTHuffTable*) at /xpdf/Stream.cc. CVE-2022-38229 is documented with the affected component and root cause across multiple feeds (e.g., NVD, Red Hat, Debian, OSV, UBUNTU). The CVSSv3.1 base score is 7.8 (HIGH) with LOCAL attack vector...

CVE-2022-38227

CVE-2022-38227 : The issue affects the open-source PDF reader XPDF, specifically commit ffaf11c, which is reported to cause a stack overflow through an __asan_memcpy call in the file asan_interceptors_memintrinsics.cpp. The vulnerability is documented across multiple feeds (NVD, Red Hat, Debian s...