Approved changes feed: RSS · Atom

cpe:2.3:a:xpdf_project:xpdf:3.04:*:*:*:*:*:*:*

part: a version: 3.04 update: *

VendorXpdf Project (3df2d729-40a2-5e56-9d0f-e71cd20ade19)
ProductXpdf (c5c98b14-78b8-5908-8229-51092ef6ef06)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jhcloos/xpdf purl2cpe 2026-06-01 10:13:01.318030

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-38238 vulnerable 2026-06-08 05:47:16.057463 Details available
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::lookChar() at /xpdf/Stream.cc.
Published: 2022-08-16T20:14:02.000Z
Updated: 2024-08-03T10:45:53.085Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38237 vulnerable 2026-06-08 05:47:16.057226 Details available
XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readScan() at /xpdf/Stream.cc.
Published: 2022-08-16T20:14:01.000Z
Updated: 2024-08-03T10:45:52.968Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38236 vulnerable 2026-06-08 05:47:16.056971 Details available
XPDF commit ffaf11c was discovered to contain a global-buffer overflow via Lexer::getObj(Object*) at /xpdf/Lexer.cc.
Published: 2022-08-16T20:14:00.000Z
Updated: 2024-08-03T10:45:53.098Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38235 vulnerable 2026-06-08 05:47:16.056615 Details available
XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar() at /xpdf/Stream.cc.
Published: 2022-08-16T20:13:59.000Z
Updated: 2024-08-03T10:45:52.994Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38234 vulnerable 2026-06-08 05:47:16.056271 Details available
XPDF commit ffaf11c was discovered to contain a segmentation violation via Lexer::getObj(Object*) at /xpdf/Lexer.cc.
Published: 2022-08-16T20:13:58.000Z
Updated: 2024-08-03T10:45:52.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38233 vulnerable 2026-06-08 05:47:16.055859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38231 vulnerable 2026-06-08 05:47:16.055530 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38230 vulnerable 2026-06-08 05:47:16.055091 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38229 vulnerable 2026-06-08 05:47:16.054748 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38228 vulnerable 2026-06-08 05:47:16.054480 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38227 vulnerable 2026-06-08 05:47:16.054113 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.