Vulnerabilities > CVE-2020-35376 - Out-of-bounds Write vulnerability in multiple products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

xpdfreader

fedoraproject

CWE-787

NVD

Published: 2020-12-26

Updated: 2023-11-07

Summary

Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp() function.

Vulnerable Configurations

Part	Description	Count
Application	Xpdfreader Xpdfreader Xpdf 4.02	1
OS	Fedoraproject Fedoraproject Fedora 32 Fedoraproject Fedora 33	2

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

References

https://forum.xpdfreader.com/viewtopic.php?f=3&t=42066
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZUU5QG6SSVRTKZTR3A72LDRVZETEI63/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VLOYVJSM54IL6I5RY4QTJGRS7PIEG44X/