彙總 xpdf_project 相關全部產品的 CVE 與安全漏洞情報，包括 CVSS、EPSS、公開時間與漏洞情報資料。
已披露問題常與 記憶體損壞與緩衝區溢位 相關，可能在 生產負載與軟體部署 場景中帶來 記憶體損壞與應用程式崩潰 等暴露風險。
相關漏洞資料主要來源於公開漏洞披露與安全公告，可用於評估歷史漏洞暴露面與修補優先順序。
| CVE | 摘要 | 來源 | 最高 CVSS | EPSS % | 公開時間 | 更新時間 |
|---|---|---|---|---|---|---|
| CVE-2022-38238 | XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::lookChar() at /xpdf/Stream.cc. | [email protected] | 7.8 | 0.32% | 2022-08-16 | 2026-06-17 |
| CVE-2022-38237 | XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readScan() at /xpdf/Stream.cc. | [email protected] | 7.8 | 0.32% | 2022-08-16 | 2026-06-17 |
| CVE-2022-38236 | XPDF commit ffaf11c was discovered to contain a global-buffer overflow via Lexer::getObj(Object*) at /xpdf/Lexer.cc. | [email protected] | 7.8 | 0.33% | 2022-08-16 | 2026-06-17 |
| CVE-2022-38235 | XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::getChar() at /xpdf/Stream.cc. | [email protected] | 5.5 | 0.29% | 2022-08-16 | 2026-06-17 |
| CVE-2022-38234 | XPDF commit ffaf11c was discovered to contain a segmentation violation via Lexer::getObj(Object*) at /xpdf/Lexer.cc. | [email protected] | 5.5 | 0.28% | 2022-08-16 | 2026-06-17 |
| CVE-2022-38233 | XPDF commit ffaf11c was discovered to contain a segmentation violation via DCTStream::readMCURow() at /xpdf/Stream.cc. | [email protected] | 5.5 | 0.29% | 2022-08-16 | 2026-06-17 |
| CVE-2022-38231 | XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::getChar() at /xpdf/Stream.cc. | [email protected] | 7.8 | 0.33% | 2022-08-16 | 2026-06-17 |
| CVE-2022-38230 | XPDF commit ffaf11c was discovered to contain a floating point exception (FPE) via DCTStream::decodeImage() at /xpdf/Stream.cc. | [email protected] | 5.5 | 0.29% | 2022-08-16 | 2026-06-17 |
| CVE-2022-38229 | XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::readHuffSym(DCTHuffTable*) at /xpdf/Stream.cc. | [email protected] | 7.8 | 0.32% | 2022-08-16 | 2026-06-17 |
| CVE-2022-38228 | XPDF commit ffaf11c was discovered to contain a heap-buffer overflow via DCTStream::transformDataUnit at /xpdf/Stream.cc. | [email protected] | 7.8 | 0.32% | 2022-08-16 | 2026-06-17 |
| CVE-2022-38227 | XPDF commit ffaf11c was discovered to contain a stack overflow via __asan_memcpy at asan_interceptors_memintrinsics.cpp. | [email protected] | 7.8 | 0.33% | 2022-08-16 | 2026-06-17 |