Approved changes feed: RSS · Atom
cpe:2.3:a:xpdfreader:xpdf:4.0.4:*:*:*:*:*:*:*part: a version: 4.0.4 update: *
| Vendor | Xpdfreader (ad55fa23-6c7d-5c79-9cd2-81be6f4f6fc0) |
|---|---|
| Product | Xpdf (fa8ac55a-bfef-5aee-a583-678a403d1e25) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/xpdf |
purl2cpe | 2026-06-01 10:10:57.544839 |
pkg:deb/ubuntu/xpdf |
purl2cpe | 2026-06-01 10:10:57.544841 |
pkg:github/tmyroadctfig/xpdf |
purl2cpe | 2026-06-01 10:10:57.544842 |
pkg:rpm/fedora/xpdf |
purl2cpe | 2026-06-01 10:10:57.544844 |
pkg:rpm/opensuse/xpdf |
purl2cpe | 2026-06-01 10:10:57.544845 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-30524 |
vulnerable | 2026-06-08 05:43:38.136002 |
Details available
There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by (for example) sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denial of Service (Segmentation fault) or possibly have unspecified other impact.
Published: 2022-05-09T18:00:09.000Z
Updated: 2024-08-03T06:48:36.389Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.