CVE-2022-33108: Xpdfreader Xpdf

High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days.

XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files.

Affected products

• Xpdfreader Xpdf: version 4.04 only

Published 2022-06-28. Last modified 2026-06-17.