CVE-2022-38928: Xpdfreader Xpdf

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

XPDF 4.04 is vulnerable to Null Pointer Dereference in FoFiType1C.cc:2393.

Affected products

• Xpdfreader Xpdf: version 4.04 only

Published 2022-09-21. Last modified 2026-06-17.