CVE-2022-38784

Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc)

published August 30, 2022

CVSS
—
EPSS
1%
Percentile
49.4
In the wild
Unconfirmed
What it is

Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00627 · 49.4th percentile
Published
2022-08-30T02:58Z
EPSS history
Timeline
  • 30 AUG 02:58Z
    Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc)
    cvelistv5