CVE-2021-27548

texlive-bin: There is a Null Pointer Dereference vulnerability in the XFAScanner::scanNode() function in XFAScanner.cc in xpdf 4.03.

CVE-2021-27548 is fixed in texlive-bin on 1 platform, first by DEBIAN-CVE-2021-27548, released May 18, 2022. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.5
medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0075
55th percentile

There is a Null Pointer Dereference vulnerability in the XFAScanner::scanNode() function in XFAScanner.cc in xpdf 4.03.

Where it's fixed

ProductFixed inFixReleased
Linux
texlive-bin · Debian 12.15 (bookworm) 2022.20220321.62855-3 DEBIAN-CVE-2021-27548 May 18, 2022
texlive-bin · Debian 13.5 (trixie) 2022.20220321.62855-3 DEBIAN-CVE-2021-27548 May 18, 2022
texlive-bin · Debian 14 2022.20220321.62855-3 DEBIAN-CVE-2021-27548 May 18, 2022

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.