Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
Xpdf Project records in CISA KEVNo Xpdf Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 34
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::lookChar() at /xpdf/Stream.cc.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00339 · Published 2022-08-16 · No fix listed CWE-787
Priority LOW 34
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readScan() at /xpdf/Stream.cc.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00339 · Published 2022-08-16 · No fix listed CWE-787
Priority LOW 34
XPDF commit ffaf11c was discovered to contain a global-buffer overflow via Lexer::getObj(Object*) at /xpdf/Lexer.cc.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00339 · Published 2022-08-16 · No fix listed CWE-120
Priority LOW 34
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::getChar() at /xpdf/Stream.cc.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00343 · Published 2022-08-16 · No fix listed CWE-787
Priority LOW 34
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readHuffSym(DCTHuffTable*) at /xpdf/Stream.cc.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00339 · Published 2022-08-16 · No fix listed CWE-787
Priority LOW 34
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00339 · Published 2022-08-16 · No fix listed CWE-787
Priority LOW 34
XPDF commit ffaf11c was discovered to contain a stack overflow via __asan_memcpy at asan_interceptors_memintrinsics.cpp.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00343 · Published 2022-08-16 · No fix listed CWE-787
Priority LOW 25
XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar() at /xpdf/Stream.cc.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.003 · Published 2022-08-16 · No fix listed CWE-754
Priority LOW 25
XPDF commit ffaf11c was discovered to contain a segmentation violation via Lexer::getObj(Object*) at /xpdf/Lexer.cc.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00297 · Published 2022-08-16 · No fix listed CWE-754
Priority LOW 25
XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::readMCURow() at /xpdf/Stream.cc.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00297 · Published 2022-08-16 · No fix listed CWE-754
Priority LOW 25
XPDF commit ffaf11c was discovered to contain a floating point exception (FPE) via DCTStream::decodeImage() at /xpdf/Stream.cc.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00464 · Published 2022-08-16 · No fix listed CWE-697
THREATIST.IORead the docs