Show filters
175 Total Results
Displaying 21-30 of 175
Sort by:
Attacker Value
Unknown
CVE-2022-43071
Disclosure Date: November 15, 2022 (last updated December 22, 2024)
A stack overflow in the Catalog::readPageLabelTree2(Object*) function of XPDF v4.04 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.
0
Attacker Value
Unknown
CVE-2022-43295
Disclosure Date: November 14, 2022 (last updated December 22, 2024)
XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy() at xpdf/Stream.cc:795.
0
Attacker Value
Unknown
CVE-2021-40226
Disclosure Date: November 10, 2022 (last updated December 22, 2024)
xpdfreader 4.03 is vulnerable to Buffer Overflow.
0
Attacker Value
Unknown
CVE-2022-41843
Disclosure Date: September 30, 2022 (last updated October 08, 2023)
An issue was discovered in Xpdf 4.04. There is a crash in convertToType0 in fofi/FoFiType1C.cc, a different vulnerability than CVE-2022-38928.
0
Attacker Value
Unknown
CVE-2022-41844
Disclosure Date: September 30, 2022 (last updated December 22, 2024)
An issue was discovered in Xpdf 4.04. There is a crash in XRef::fetch(int, int, Object*, int) in xpdf/XRef.cc, a different vulnerability than CVE-2018-16369 and CVE-2019-16088.
0
Attacker Value
Unknown
CVE-2022-41842
Disclosure Date: September 30, 2022 (last updated December 22, 2024)
An issue was discovered in Xpdf 4.04. There is a crash in gfseek(_IO_FILE*, long, int) in goo/gfile.cc.
0
Attacker Value
Unknown
CVE-2022-38222
Disclosure Date: September 29, 2022 (last updated October 08, 2023)
There is a use-after-free issue in JBIG2Stream::close() located in JBIG2Stream.cc in Xpdf 4.04. It can be triggered by sending a crafted PDF file to (for example) the pdfimages binary. It allows an attacker to cause Denial of Service or possibly have unspecified other impact.
0
Attacker Value
Unknown
CVE-2022-38928
Disclosure Date: September 21, 2022 (last updated October 08, 2023)
XPDF 4.04 is vulnerable to Null Pointer Dereference in FoFiType1C.cc:2393.
0
Attacker Value
Unknown
CVE-2022-38334
Disclosure Date: September 15, 2022 (last updated November 29, 2024)
XPDF v4.04 and earlier was discovered to contain a stack overflow via the function Catalog::countPageTree() at Catalog.cc.
0
Attacker Value
Unknown
CVE-2022-36561
Disclosure Date: August 30, 2022 (last updated October 08, 2023)
XPDF v4.0.4 was discovered to contain a segmentation violation via the component /xpdf/AcroForm.cc:538.
0
