VYPR
← All advisories
Unrated severityNVD Advisory· Published May 16, 2022· Updated Aug 3, 2024

CVE-2022-30775

CVE-2022-30775

Description

xpdf 4.04 allocates excessive memory when presented with crafted input. This can be triggered by (for example) sending a crafted PDF document to the pdftoppm binary. It is most easily reproduced with the DCMAKE_CXX_COMPILER=afl-clang-fast++ option.

Affected products

2
  • Xpdf/Xpdfcpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: = 4.04

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.