Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Adobe Acrobat Reader: Potential Crash When Reading XREF Data
published 4 years ago
Summary
Adobe Acrobat Reader may crash when reading cross-reference data in a PDF file. This could happen if a malicious PDF is opened, potentially allowing an attacker to execute arbitrary code. Users should update to the latest version of Adobe Acrobat Reader to mitigate this risk.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| OSS-Fuzz | – | ghostscript | All versions |
Original advisory text
Heap-buffer-overflow in read_xref
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47501
```
Crash type: Heap-buffer-overflow READ 8
Crash state:
read_xref
pdfi_read_xref
pdfi_set_input_stream
```
```
Crash type: Heap-buffer-overflow READ 8
Crash state:
read_xref
pdfi_read_xref
pdfi_set_input_stream
```
References
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47501 Third Party Advisory
Timeline
Published19 May 2022
Updated29 Mar 2026
First seen29 Mar 2026
Sources
OSV-2022-417 · OSV
Track software like this
Free during beta