CVE-2022-41844: Xpdfreader Xpdf

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in Xpdf 4.04. There is a crash in XRef::fetch(int, int, Object*, int) in xpdf/XRef.cc, a different vulnerability than CVE-2018-16369 and CVE-2019-16088.

Affected products

• Xpdfreader Xpdf: version 4.04 only

Published 2022-09-30. Last modified 2026-06-17.