Vulnerability CVE-2022-41843: Information

Description

An issue was discovered in Xpdf 4.04. There is a crash in convertToType0 in fofi/FoFiType1C.cc, a different vulnerability than CVE-2022-38928.

Severity: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Published: Sept. 30, 2022
Modified: Oct. 3, 2022
Error type identifier: CWE-476

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
xpdfsisyphus4.05-alt14.05-alt1ALT-PU-2024-7465-3347491Fixed
xpdfsisyphus_e2k4.05-alt14.05-alt1ALT-PU-2024-7502-1-Fixed
xpdfsisyphus_riscv644.05-alt14.05-alt1ALT-PU-2024-7493-1-Fixed
xpdfsisyphus_loongarch644.05-alt14.05-alt1ALT-PU-2024-7487-1-Fixed
xpdfp104.05-alt14.04-alt1ALT-PU-2024-7467-2347494Testing

References to Advisories, Solutions, and Tools

    1. Configuration 1

      cpe:2.3:a:xpdfreader:xpdf:4.04:*:*:*:*:*:*:*