Stack Overflow Vulnerability in XPDF Software by JHCloss
CVE-2022-38227

7.8HIGH

Key Information:

Vendor

XPDF Project

Status
XPDF
Vendor
CVE Published:
16 August 2022

What is CVE-2022-38227?

A stack overflow vulnerability was identified in XPDF due to improper handling of memory operations in the __asan_memcpy function. This flaw may allow attackers to exploit the software, potentially leading to unauthorized access or execution of arbitrary code. It is crucial for organizations using XPDF to update their systems to mitigate any associated risks and enhance their cybersecurity posture.

References

https://github.com/jhcloos/xpdf/issues/4
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.