Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2022-38171

Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2021-30860 (Apple CoreGraphics).

  • Published: Aug 22, 2022
  • Updated: Apr 14, 2023
  • CVE: CVE-2022-38171
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
xpdfreader / xpdf 4.04 4.04.x
freedesktop / poppler - 22.09.0