Log in Start free

Vulnerability · Published May 18, 2022 · Assigned by mitre

CVE-2021-27548

Medium 5.5

In plain English

A medium-severity security flaw in the texlive-bin package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 55% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.8%top 44.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

There is a Null Pointer Dereference vulnerability in the XFAScanner::scanNode() function in XFAScanner.cc in xpdf 4.03.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12texlive-bin2022.20220321.62855-3DEBIAN-CVE-2021-27548
Debian:13texlive-bin2022.20220321.62855-3DEBIAN-CVE-2021-27548
Debian:14texlive-bin2022.20220321.62855-3DEBIAN-CVE-2021-27548
Ubuntu:22.04:LTSipeno fix listedUBUNTU-CVE-2021-27548
Ubuntu:24.04:LTSipeno fix listedUBUNTU-CVE-2021-27548
Ubuntu:25.10ipeno fix listedUBUNTU-CVE-2021-27548
Ubuntu:26.04:LTSipeno fix listedUBUNTU-CVE-2021-27548
Ubuntu:26.10ipeno fix listedUBUNTU-CVE-2021-27548
Ubuntu:22.04:LTStexlive-binno fix listedUBUNTU-CVE-2021-27548
Ubuntu:24.04:LTStexlive-binno fix listedUBUNTU-CVE-2021-27548
Ubuntu:25.10texlive-binno fix listedUBUNTU-CVE-2021-27548
Ubuntu:26.04:LTStexlive-binno fix listedUBUNTU-CVE-2021-27548
Ubuntu:26.10texlive-binno fix listedUBUNTU-CVE-2021-27548
Ubuntu:22.04:LTSxpdfno fix listedUBUNTU-CVE-2021-27548
Ubuntu:24.04:LTSxpdfno fix listedUBUNTU-CVE-2021-27548
Ubuntu:25.10xpdfno fix listedUBUNTU-CVE-2021-27548
Ubuntu:26.04:LTSxpdfno fix listedUBUNTU-CVE-2021-27548
Ubuntu:26.10xpdfno fix listedUBUNTU-CVE-2021-27548

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References