CVE-2022-33108

CWE-787 — Out-of-bounds Write5 documents5 sources
Severity
7.8HIGH
EPSS
0.2%
top 56.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Xpdfreader Xpdf
Timeline
PublishedJun 28
Latest updateJun 29

Description

XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages1 packages

▶NVDxpdfreader/xpdf4.04

🔴Vulnerability Details

3
GHSA
GHSA-3w4j-cfcj-wj69: XPDF v4↗2022-06-29
▶
OSV
CVE-2022-33108: XPDF v4↗2022-06-28
▶
CVEList
CVE-2022-33108: XPDF v4↗2022-06-28
▶

📋Vendor Advisories

1
Debian
CVE-2022-33108: xpdf - XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Obje...↗2022
▶
CVE-2022-33108 (HIGH CVSS 7.8) | XPDF v4.04 was discovered to contai | cvebase.io