CVE-2022-35099
Published
CVSS v3
5.5
MEDIUM
CVSS v2
N/A
Affected
2
PROJECTS
Description
SWFTools commit 772e55a2 was discovered to contain a stack overflow via ImageStream::getPixel(unsigned char*) at /xpdf/Stream.cc.
记录自己使用 fuzz 发现的漏洞,包括产品 version、reproduce 步骤、威胁 rank。也自觉发现这些 POC 并不是重点,可能往后有进一步分析的必要,因此在此记录。