medium5.5
CVE-2022-30775
xpdf 4.04 allocates excessive memory when presented with crafted input.
Impact
xpdf 4.04 allocates excessive memory when presented with crafted input. This can be triggered by (for example) sending a crafted PDF document to the pdftoppm binary. It is most easily reproduced with the DCMAKE_CXX_COMPILER=afl-clang-fast++ option.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xpdfreader | Xpdf | Version 4.04 |