CVE-2022-41844

MEDIUM 5.5CVE-2022-41844 · Published 30/09/2022 · updated 17/06/2026

In short

CVE-2022-41844 is a MEDIUM (CVSS 5.5) vulnerability affecting xpdf (xpdfreader).
Chance of exploitation in the next 30 days (EPSS): 0.39%, higher than 33.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
xpdf xpdfreader	`= 4.04`	No fix yet

Description

An issue was discovered in Xpdf 4.04. There is a crash in XRef::fetch(int, int, Object*, int) in xpdf/XRef.cc, a different vulnerability than CVE-2018-16369 and CVE-2019-16088.

References

xpdfreader.com/download.html · Patch
forum.xpdfreader.com/viewtopic.php · Exploit
forum.xpdfreader.com/viewtopic.php · Issue Tracking

More vulnerabilities in xpdf

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

xpdf

xpdfreader

= 4.04

No fix yet

More vulnerabilities in xpdf

See all →