Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade poppler-glibUpgrade poppler-utilsUpgrade poppler-glib-develUpgrade popplerUpgrade poppler-qt5Upgrade poppler-cpp-develUpgrade poppler-cppUpgrade poppler-qt5-develUpgrade poppler-devel | May 15, 2023 | Aug 30, 2022 |
| Alpine Linux | — | Upgrade poppler | Mar 21, 2024 | Aug 24, 2022 |
| Amazon Linux Ami 2 | — | Upgrade poppler-glib-develUpgrade poppler-cppUpgrade popplerUpgrade poppler-glibUpgrade poppler-qt-develUpgrade poppler-cpp-develUpgrade poppler-develUpgrade poppler-debuginfoUpgrade poppler-utilsUpgrade poppler-demosUpgrade poppler-qt | Jun 8, 2023 | Aug 30, 2022 |
| Amazon_linux_2023 | — | Upgrade poppler-debugsourceUpgrade poppler-debuginfoUpgrade poppler-cpp-debuginfoUpgrade poppler-cpp-develUpgrade poppler-utilsUpgrade poppler-glib-docUpgrade popplerUpgrade poppler-utils-debuginfoUpgrade poppler-glibUpgrade poppler-glib-debuginfoUpgrade poppler-glib-develUpgrade poppler-develUpgrade poppler-cpp | Feb 17, 2025 | Aug 30, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Aug 30, 2022 |
| Centos_linux | — | Upgrade poppler-glibUpgrade popplerUpgrade poppler-debuginfoUpgrade poppler-cppUpgrade poppler-glib-debuginfoUpgrade poppler-utilsUpgrade poppler-utils-debuginfoUpgrade poppler-qt5Upgrade poppler-qt5-debuginfoUpgrade poppler-debugsourceUpgrade poppler-cpp-debuginfo | May 15, 2023 | Aug 30, 2022 |
| Debian | — | Upgrade poppler | Sep 27, 2022 | Aug 30, 2022 |
| Gentoo Linux | — | Upgrade app-text/poppler. | Sep 30, 2022 | Aug 30, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade poppler-utilsUpgrade poppler-qtUpgrade poppler-glibUpgrade poppler | Mar 9, 2023 | Aug 30, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade poppler-qtUpgrade popplerUpgrade poppler-utilsUpgrade poppler-glib | Dec 9, 2022 | Aug 30, 2022 |
| Oracle_linux | — | Upgrade poppler-qt5Upgrade popplerUpgrade poppler-develUpgrade poppler-glibUpgrade poppler-cpp-develUpgrade poppler-cppUpgrade poppler-qt5-develUpgrade poppler-glib-develUpgrade poppler-utils | May 17, 2023 | Aug 30, 2022 |
| Redhat_linux | — | Upgrade poppler-utils-debuginfoUpgrade poppler-glibNo solution existsUpgrade poppler-qt5-debuginfoUpgrade popplerUpgrade poppler-debuginfoUpgrade poppler-debugsourceUpgrade poppler-develUpgrade poppler-glib-debuginfoUpgrade poppler-qt5-develUpgrade poppler-qt5Upgrade poppler-cpp-develUpgrade poppler-utilsUpgrade poppler-cppUpgrade poppler-glib-develUpgrade poppler-cpp-debuginfo | May 15, 2023 | Aug 30, 2022 |
| Rocky_linux | — | Upgrade poppler-cpp-develUpgrade poppler-cpp-debuginfoUpgrade poppler-utils-debuginfoUpgrade poppler-qt5Upgrade poppler-cppUpgrade poppler-develUpgrade poppler-glib-debuginfoUpgrade poppler-utilsUpgrade poppler-qt5-develUpgrade poppler-glib-develUpgrade poppler-debuginfoUpgrade popplerUpgrade poppler-qt5-debuginfoUpgrade poppler-debugsourceUpgrade poppler-glib | Mar 5, 2024 | Aug 30, 2022 |
| Suse | — | Upgrade libpoppler-qt5-develUpgrade libpoppler117Upgrade libpoppler89-32bitUpgrade libpoppler-develUpgrade typelib-1_0-Poppler-0_18Upgrade libpoppler-qt6-3Upgrade libpoppler89Upgrade libpoppler126Upgrade libpoppler-qt4-develUpgrade libpoppler-glib8-32bitUpgrade libpoppler73-32bitUpgrade libpoppler-qt4-4Upgrade libpoppler-qt6-develUpgrade libpoppler117-32bitUpgrade libpoppler60Upgrade libpoppler-cpp0-32bitUpgrade libpoppler-qt5-1-32bitUpgrade libpoppler73Upgrade libpoppler-qt5-1Upgrade libpoppler-cpp0Upgrade poppler-toolsUpgrade libpoppler-glib8Upgrade libpoppler-glib-devel | Feb 23, 2023 | Aug 30, 2022 |
| Ubuntu | — | Upgrade poppler-utils (Ubuntu Pro)Upgrade libpoppler58 (Ubuntu Pro)Upgrade libpoppler73Upgrade libpoppler97Upgrade poppler-utilsUpgrade libpoppler118 | Sep 13, 2022 | Aug 30, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub