p PatchFirst

CVE-2022-27135

CVE-2022-27135

This page contains facts from public vulnerability sources. Check the original advisory before updating.

xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc. An attacker can exploit this bug to cause a Denial of Service (Segmentation fault) or other unspecified effects by sending a crafted PDF file to the pdftoppm binary.

CVSS 5.5 · Medium · EPSS 1.0%

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • ipe Ubuntu:16.04:LTS

    Versions
    • 7.1.4-2.1
    • 7.1.8-1
    • 7.1.10-1
    • 7.1.10-1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:18.04:LTS

    Versions
    • 7.2.7-2
    • 7.2.7-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:20.04:LTS

    Versions
    • 7.2.9-1
    • 7.2.13-2
    • 7.2.13-2build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:22.04:LTS

    Versions
    • 7.2.23+dfsg1-2
    • 7.2.24+dfsg1-1
    • 7.2.24+dfsg1-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:24.04:LTS

    Versions
    • 7.2.27+dfsg1-2
    • 7.2.28-2
    • 7.2.28-2.1build2
    • 7.2.28-2.1build3
    • 7.2.28-2.1build4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:25.10

    Versions
    • 7.2.30-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:26.10

    Versions
    • 7.2.30-1build2
    • 7.2.30-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:26.04:LTS

    Versions
    • 7.2.30-1build1
    • 7.2.30-1build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →