Search for vulnerabilities
Vulnerability details: VCID-2mk4-bhs6-aaap
Vulnerability ID VCID-2mk4-bhs6-aaap
Aliases CVE-2022-41843
Summary An issue was discovered in Xpdf 4.04. There is a crash in convertToType0 in fofi/FoFiType1C.cc, a different vulnerability than CVE-2022-38928.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-476 NULL Pointer Dereference
System Score Found at
epss 0.00044 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00044 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00044 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00044 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00044 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00044 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00044 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00044 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00044 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00044 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00044 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00044 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00044 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00044 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00044 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00044 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00055 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00063 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.00063 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
epss 0.0007 https://api.first.org/data/v1/epss?cve=CVE-2022-41843
cvssv3.1 5.5 https://forum.xpdfreader.com/viewtopic.php?f=1&t=42344
ssvc Track https://forum.xpdfreader.com/viewtopic.php?f=1&t=42344
cvssv3.1 5.5 https://forum.xpdfreader.com/viewtopic.php?f=3&t=42325&sid=7b08ba9a518a99ce3c5ff40e53fc6421
ssvc Track https://forum.xpdfreader.com/viewtopic.php?f=3&t=42325&sid=7b08ba9a518a99ce3c5ff40e53fc6421
cvssv3.1 5.5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3 5.5 https://nvd.nist.gov/vuln/detail/CVE-2022-41843
cvssv3.1 5.5 https://nvd.nist.gov/vuln/detail/CVE-2022-41843
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2022-41843
https://forum.xpdfreader.com/viewtopic.php?f=1&t=42344
https://forum.xpdfreader.com/viewtopic.php?f=3&t=42325&sid=7b08ba9a518a99ce3c5ff40e53fc6421
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cpe:2.3:a:xpdfreader:xpdf:4.04:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xpdfreader:xpdf:4.04:*:*:*:*:*:*:*
CVE-2022-41843 https://nvd.nist.gov/vuln/detail/CVE-2022-41843
GLSA-202409-25 https://security.gentoo.org/glsa/202409-25
No exploits are available.
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://forum.xpdfreader.com/viewtopic.php?f=1&t=42344
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-20T19:39:46Z/ Found at https://forum.xpdfreader.com/viewtopic.php?f=1&t=42344
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Found at https://forum.xpdfreader.com/viewtopic.php?f=3&t=42325&sid=7b08ba9a518a99ce3c5ff40e53fc6421
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-20T19:39:46Z/ Found at https://forum.xpdfreader.com/viewtopic.php?f=3&t=42325&sid=7b08ba9a518a99ce3c5ff40e53fc6421
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2022-41843
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2022-41843
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.13835
EPSS Score 0.00044
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.