Vulnerability Database

308,379

Total vulnerabilities in the database

CVE-2022-24106

In Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the image, leading to an unknown integer-related vulnerability in Stream.cc.

  • Published: Aug 30, 2022
  • Updated: Nov 16, 2025
  • CVE: CVE-2022-24106
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
glyphandcog / xpdfreader - 4.04