CVE-2022-27135

Katalog CVE

CVSS 5.5 · Medium EPSS 1,0%

Kerentanan Out-of-bounds Write pada xpdfreader xpdf. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc. An attacker can exploit this bug to cause a Denial of Service (Segmentation fault) or other unspecified effects by sending a crafted PDF file to the pdftoppm binary.

Rincian

Terbit di NVD

25 April 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

1,0% peluang dieksploitasi; lebih tinggi dari 62,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://forum.xpdfreader.com/viewtopic.php?f=3&t=42232 exploit · advisory pihak ketiga
• https://github.com/verf1sh/Poc/blob/master/pic_ppm.png advisory pihak ketiga
• https://github.com/verf1sh/Poc/blob/master/poc_ppm exploit · advisory pihak ketiga