Xpdf · Xpdf · CVE-2022-48545
**Name of the Vulnerable Software and Affected Versions**
xpdf version 4.02
**Description**
The issue is related to an infinite recursion in the `Catalog::findDestInTree` function, which can cause a denial of service. This function is part of the xpdf software, used for viewing PDF files. The recursion is uncontrolled, allowing an attacker to exploit the issue and disrupt service.
**Recommendations**
For xpdf version 4.02, consider disabling the `Catalog::findDestInTree` function as a temporary workaround to prevent potential denial of service attacks until a patch is available.