vulnerability

Debian: CVE-2022-38784: poppler -- security update

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:M/Au:N/C:C/I:C/A:C)

Published

Aug 30, 2022

Added

Sep 27, 2022

Modified

Mar 30, 2026

Description

Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.

Solution

debian-upgrade-poppler

References

CVE-2022-38784
https://attackerkb.com/topics/CVE-2022-38784
CWE-190
DEBIAN-DLA-3120-1
DEBIAN-DSA-5224
DEBIAN-DSA-5224-1
EUVD-EUVD-2022-41347
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-41347

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report