CVE-2024-7868

Name of the Vulnerable Software and Affected Versions Xpdf versions 4.05 and earlier

Description The issue arises from invalid header information in a DCT (JPEG) stream, leading to an uninitialized variable in the DCT decoder. This can cause a segfault when attempting to read from an invalid address. A proof-of-concept PDF file has been identified as triggering this issue.

Recommendations For Xpdf versions 4.05 and earlier, consider updating to a newer version to mitigate the risk, as the current version contains an uninitialized variable in the DCT decoder that can lead to a segfault. At the moment, there is no information about a newer version that contains a fix for this vulnerability.