CVEs-PoC/2018/CVE-2018-7175.md

CVE-2018-7175

Description

An issue was discovered in xpdf 4.00. A NULL pointer dereference in readCodestream allows an attacker to cause denial of service via a JPX image with zero components.

POC

Reference

• https://forum.xpdfreader.com/viewtopic.php?f=3&t=613
• https://forum.xpdfreader.com/viewtopic.php?f=3&t=613

Github

• https://github.com/andir/nixos-issue-db-example