Skip to main content

Xpdfreader CVE-2022-24107

HIGH
Integer Overflow or Wraparound (CWE-190)
2022-08-30 cve@mitre.org
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Aug 30, 2022 - 04:15 nvd
HIGH 7.8

DescriptionNVD

Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc.

AnalysisAI

Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Integer Overflow (CWE-190), which allows attackers to cause unexpected behavior through arithmetic overflow. Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc. Affected products include: Glyphandcog Xpdfreader. Version information: prior to 4.04.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate arithmetic operations, use safe integer libraries, check bounds before allocation.

CVE-2019-16115 HIGH POC
7.8 Sep 08

In Xpdf 4.01.01, a stack-based buffer under-read could be triggered in IdentityFunction::transform in Function.cc, used

CVE-2019-14288 HIGH POC
7.8 Jul 27

An issue was discovered in Xpdf 4.01.01. Rated high severity (CVSS 7.8), this vulnerability is no authentication require

CVE-2019-13289 HIGH POC
7.8 Jul 04

In Xpdf 4.01.01, there is a use-after-free vulnerability in the function JBIG2Stream::close() located at JBIG2Stream.cc.

CVE-2019-13283 HIGH POC
7.8 Jul 04

In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in strncpy from FoFiType1::parse in fofi/FoFiType1.cc

CVE-2019-13282 HIGH POC
7.8 Jul 04

In Xpdf 4.01.01, a heap-based buffer over-read could be triggered in SampledFunction::transform in Function.cc when usin

CVE-2019-13281 HIGH POC
7.8 Jul 04

In Xpdf 4.01.01, a heap-based buffer overflow could be triggered in DCTStream::decodeImage() in Stream.cc when writing t

CVE-2019-12957 HIGH POC
7.8 Jun 25

In Xpdf 4.01.01, a buffer over-read could be triggered in FoFiType1C::convertToType1 in fofi/FoFiType1C.cc when the inde

CVE-2019-9589 HIGH POC
7.8 Mar 06

There is a NULL pointer dereference vulnerability in PSOutputDev::setupResources() located in PSOutputDev.cc in Xpdf 4.0

CVE-2019-9588 HIGH POC
7.8 Mar 06

There is an Invalid memory access in gAtomicIncrement() located at GMutex.h in Xpdf 4.01. Rated high severity (CVSS 7.8)

CVE-2019-9587 HIGH POC
7.8 Mar 06

There is a stack consumption issue in md5Round1() located in Decrypt.cc in Xpdf 4.01. Rated high severity (CVSS 7.8), th

CVE-2019-12515 HIGH POC
7.1 Jun 02

There is an out-of-bounds read vulnerability in the function FlateStream::getChar() located at Stream.cc in Xpdf 4.01.01

CVE-2019-12493 HIGH POC
7.1 May 31

A stack-based buffer over-read exists in PostScriptFunction::transform in Function.cc in Xpdf 4.01.01 because GfxSeparat

Share

CVE-2022-24107 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy