CVE-2022-38928: Null Pointer Dereference
Published Sep 21, 2022
·Updated
XPDF 4.04 is vulnerable to Null Pointer Dereference in FoFiType1C.cc:2393.
Affected Software
7 affected componentsFixes available
Xpdfreader Xpdf=4.04
alpine/xpdf<4.05-r0
4.05-r0
alpine/xpdf<4.05-r0
4.05-r0
alpine/xpdf<4.05-r0
4.05-r0
alpine/xpdf<4.05-r0
4.05-r0
alpine/xpdf<4.05-r0
4.05-r0
alpine/xpdf<4.05-r0
4.05-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/xpdfto a version that resolves this vulnerability.Fixed in 4.05-r0
Event History
Sep 21, 2022
CVE Published
via MITRE·12:57 PM
Data Sourced
via MITRE·12:57 PM
Description
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·01:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of XPDF 4.04?
The vulnerability ID of XPDF 4.04 is CVE-2022-38928.
2
What is the severity level of CVE-2022-38928?
The severity level of CVE-2022-38928 is high with a CVSS score of 7.8.
3
Which software version is affected by CVE-2022-38928?
XPDF 4.04 is affected by CVE-2022-38928.
4
What is the description of CVE-2022-38928?
CVE-2022-38928 is a vulnerability in XPDF 4.04 that allows for a null pointer dereference in FoFiType1C.cc:2393.
5
Is there any reference material available for CVE-2022-38928?
Yes, you can refer to the following link for more information: [link](https://forum.xpdfreader.com/viewtopic.php?f=3&t=42325&sid=7b08ba9a518a99ce3c5ff40e53fc6421)