Heap Buffer Overflow Vulnerability in XPDF Software
CVE-2022-38228

7.8HIGH

Key Information:

Vendor

XPDF Project

Status
XPDF
Vendor
CVE Published:
16 August 2022

What is CVE-2022-38228?

A heap buffer overflow has been identified in XPDF due to an improper handling of data within the DCTStream::transformDataUnit function in Stream.cc. This flaw could potentially allow an attacker to execute arbitrary code or cause a denial of service on the affected system. It is crucial for users of XPDF to update their software to the latest version to mitigate the risks associated with this vulnerability.

References

https://github.com/jhcloos/xpdf/issues/7
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.