Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-poppleralma-upgrade-poppler-cppalma-upgrade-poppler-cpp-develalma-upgrade-poppler-develalma-upgrade-poppler-glibalma-upgrade-poppler-glib-develalma-upgrade-poppler-qt5alma-upgrade-poppler-qt5-develalma-upgrade-poppler-utils | May 15, 2023 | Aug 30, 2022 | |
| Alpine Linux | alpine-linux-upgrade-poppler | Mar 21, 2024 | Aug 24, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-poppleramazon-linux-ami-2-upgrade-poppler-cppamazon-linux-ami-2-upgrade-poppler-cpp-develamazon-linux-ami-2-upgrade-poppler-debuginfoamazon-linux-ami-2-upgrade-poppler-demosamazon-linux-ami-2-upgrade-poppler-develamazon-linux-ami-2-upgrade-poppler-glibamazon-linux-ami-2-upgrade-poppler-glib-develamazon-linux-ami-2-upgrade-poppler-qtamazon-linux-ami-2-upgrade-poppler-qt-develamazon-linux-ami-2-upgrade-poppler-utils | Jun 8, 2023 | Aug 30, 2022 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-poppleramazon-linux-2023-upgrade-poppler-cppamazon-linux-2023-upgrade-poppler-cpp-debuginfoamazon-linux-2023-upgrade-poppler-cpp-develamazon-linux-2023-upgrade-poppler-debuginfoamazon-linux-2023-upgrade-poppler-debugsourceamazon-linux-2023-upgrade-poppler-develamazon-linux-2023-upgrade-poppler-glibamazon-linux-2023-upgrade-poppler-glib-debuginfoamazon-linux-2023-upgrade-poppler-glib-develamazon-linux-2023-upgrade-poppler-glib-docamazon-linux-2023-upgrade-poppler-utilsamazon-linux-2023-upgrade-poppler-utils-debuginfo | Feb 17, 2025 | Aug 30, 2022 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Aug 30, 2022 | |
| Centos_linux | — | centos-upgrade-popplercentos-upgrade-poppler-cppcentos-upgrade-poppler-cpp-debuginfocentos-upgrade-poppler-debuginfocentos-upgrade-poppler-debugsourcecentos-upgrade-poppler-glibcentos-upgrade-poppler-glib-debuginfocentos-upgrade-poppler-qt5centos-upgrade-poppler-qt5-debuginfocentos-upgrade-poppler-utilscentos-upgrade-poppler-utils-debuginfo | May 15, 2023 | Aug 30, 2022 |
| Debian | debian-upgrade-poppler | Sep 27, 2022 | Aug 30, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-app-text-poppler | Sep 30, 2022 | Aug 30, 2022 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-popplerhuawei-euleros-2_0_sp5-upgrade-poppler-glibhuawei-euleros-2_0_sp5-upgrade-poppler-qthuawei-euleros-2_0_sp5-upgrade-poppler-utils | Mar 9, 2023 | Aug 30, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-popplerhuawei-euleros-2_0_sp8-upgrade-poppler-glibhuawei-euleros-2_0_sp8-upgrade-poppler-qthuawei-euleros-2_0_sp8-upgrade-poppler-utils | Dec 9, 2022 | Aug 30, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-poppleroracle-linux-upgrade-poppler-cpporacle-linux-upgrade-poppler-cpp-develoracle-linux-upgrade-poppler-develoracle-linux-upgrade-poppler-gliboracle-linux-upgrade-poppler-glib-develoracle-linux-upgrade-poppler-qt5oracle-linux-upgrade-poppler-qt5-develoracle-linux-upgrade-poppler-utils | May 17, 2023 | Aug 30, 2022 |
| Redhat_linux | redhat-upgrade-popplerredhat-upgrade-poppler-cppredhat-upgrade-poppler-cpp-debuginforedhat-upgrade-poppler-cpp-develredhat-upgrade-poppler-debuginforedhat-upgrade-poppler-debugsourceredhat-upgrade-poppler-develredhat-upgrade-poppler-glibredhat-upgrade-poppler-glib-debuginforedhat-upgrade-poppler-glib-develredhat-upgrade-poppler-qt5redhat-upgrade-poppler-qt5-debuginforedhat-upgrade-poppler-qt5-develredhat-upgrade-poppler-utilsredhat-upgrade-poppler-utils-debuginfo | May 15, 2023 | Aug 30, 2022 | |
| Rocky_linux | rocky-upgrade-popplerrocky-upgrade-poppler-cpprocky-upgrade-poppler-cpp-debuginforocky-upgrade-poppler-cpp-develrocky-upgrade-poppler-debuginforocky-upgrade-poppler-debugsourcerocky-upgrade-poppler-develrocky-upgrade-poppler-glibrocky-upgrade-poppler-glib-debuginforocky-upgrade-poppler-glib-develrocky-upgrade-poppler-qt5rocky-upgrade-poppler-qt5-debuginforocky-upgrade-poppler-qt5-develrocky-upgrade-poppler-utilsrocky-upgrade-poppler-utils-debuginfo | Mar 5, 2024 | Aug 30, 2022 | |
| Suse | — | suse-upgrade-libpoppler-cpp0suse-upgrade-libpoppler-cpp0-32bitsuse-upgrade-libpoppler-develsuse-upgrade-libpoppler-glib-develsuse-upgrade-libpoppler-glib8suse-upgrade-libpoppler-glib8-32bitsuse-upgrade-libpoppler-qt4-4suse-upgrade-libpoppler-qt4-develsuse-upgrade-libpoppler-qt5-1suse-upgrade-libpoppler-qt5-1-32bitsuse-upgrade-libpoppler-qt5-develsuse-upgrade-libpoppler-qt6-3suse-upgrade-libpoppler-qt6-develsuse-upgrade-libpoppler117suse-upgrade-libpoppler117-32bitsuse-upgrade-libpoppler126suse-upgrade-libpoppler60suse-upgrade-libpoppler73suse-upgrade-libpoppler73-32bitsuse-upgrade-libpoppler89suse-upgrade-libpoppler89-32bitsuse-upgrade-poppler-toolssuse-upgrade-typelib-1_0-poppler-0_18 | Feb 23, 2023 | Aug 30, 2022 |
| Ubuntu | ubuntu-pro-upgrade-libpoppler58ubuntu-pro-upgrade-poppler-utilsubuntu-upgrade-libpoppler118ubuntu-upgrade-libpoppler73ubuntu-upgrade-libpoppler97ubuntu-upgrade-poppler-utils | Sep 13, 2022 | Aug 30, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub