CVE-2022-41843: Null Pointer Dereference
Published Sep 30, 2022
·Updated
An issue was discovered in Xpdf 4.04. There is a crash in convertToType0 in fofi/FoFiType1C.cc, a different vulnerability than CVE-2022-38928.
Affected Software
7 affected componentsFixes available
Xpdfreader Xpdf=4.04
alpine/xpdf<4.05-r0
4.05-r0
alpine/xpdf<4.05-r0
4.05-r0
alpine/xpdf<4.05-r0
4.05-r0
alpine/xpdf<4.05-r0
4.05-r0
alpine/xpdf<4.05-r0
4.05-r0
alpine/xpdf<4.05-r0
4.05-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/xpdfto a version that resolves this vulnerability.Fixed in 4.05-r0
Event History
Sep 30, 2022
CVE Published
via MITRE·04:21 AM
Data Sourced
via MITRE·04:21 AM
Description
Data Sourced
via NVD·05:15 AM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·05:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2022-41843?
CVE-2022-41843 is a vulnerability discovered in Xpdf 4.04.
2
What is the severity of CVE-2022-41843?
The severity of CVE-2022-41843 is medium with a CVSS score of 5.5.
3
How does CVE-2022-41843 affect Xpdf?
CVE-2022-41843 affects Xpdf 4.04.
4
What is the vulnerability description of CVE-2022-41843?
CVE-2022-41843 is a crash vulnerability in the convertToType0 function in fofi/FoFiType1C.cc.
5
How can I fix CVE-2022-41843?
To fix CVE-2022-41843, update Xpdf to a version that addresses the vulnerability.