Every CVE Search/ Get API key

CVE-2022-38784

Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder ...

7.8 HighFix available

Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.63%Down 0.9 points since Aug 30, 2022
90%50%10%1%

What each source reports

NVD Score used 7.8

Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.

Record
CVE-2022-38784
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-190
Updated
2026-11-02
CVE List No score

Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.

Record
CVE-2022-38784
Updated
2026-11-02
EUVDEUVD-2022-41347 No score

Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.

Record
EUVD-2022-41347
Updated
2026-11-03
GitHub AdvisoriesGHSA-5557-33mq-5995 7.8

Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder ...

Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.

Record
GHSA-5557-33mq-5995
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-190
Updated
2026-11-02
OSVBELL-CVE-2022-38784 7.8

CVE-2022-38784 does not affect BellSoft software

Record
BELL-CVE-2022-38784
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2022-38784 7.8

Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.

Record
DEBIAN-CVE-2022-38784
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-03
Show 17 moreShow less
OSVJLSEC-2026-81 7.8

Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.

Record
JLSEC-2026-81
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2022-1906 7.8

poppler security update

Poppler is a free software utility library for rendering Portable Document Format (PDF) documents. \Its development is supported by freedesktop.org. It is commonly used on Linux systems,and is used by \the PDF viewers of the open source GNOME and KDE desktop environments.

Security Fix(es):

Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.(CVE-2022-38784)

Record
OESA-2022-1906
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:2259 7.8

Red Hat Security Advisory: poppler security and bug fix update

Record
RHSA-2023:2259
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:2810 7.8

Red Hat Security Advisory: poppler security update

Record
RHSA-2023:2810
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-38784 7.8

Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.

Record
UBUNTU-CVE-2022-38784
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2023:2259 No score

Moderate: poppler security and bug fix update

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

  • poppler: integer overflow in JBIG2 decoder using malformed files (CVE-2022-38784)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2023:2259
Updated
2026-11-02
OSVALSA-2023:2810 No score

Moderate: poppler security update

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

  • poppler: integer overflow in JBIG2 decoder using malformed files (CVE-2022-38784)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2023:2810
Updated
2026-11-02
OSVCLSA-2024-1721206996 No score

poppler: Fix of CVE-2022-38784

  • CVE-2022-38784: fix integer overflow in JBIG2 decoder
Record
CLSA-2024-1721206996
Updated
2026-11-02
OSV No score

Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.

Record
CVE-2022-38784
Updated
2026-11-02
OSVMGASA-2022-0386 No score

Updated poppler packages fix security vulnerability

Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf. (CVE-2022-38784)

Record
MGASA-2022-0386
Updated
2026-11-02
OSVopenSUSE-SU-2024:12362-1 No score

libpoppler-cpp0-22.09.0-1.1 on GA media

These are all security issues fixed in the libpoppler-cpp0-22.09.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12362-1
Updated
2026-11-02
OSVRLSA-2023:2810 No score

Moderate: poppler security update

Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.

Security Fix(es):

  • poppler: integer overflow in JBIG2 decoder using malformed files (CVE-2022-38784)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.

Record
RLSA-2023:2810
Updated
2026-11-02
OSVSUSE-SU-2023:0480-1 No score

Security update for poppler

This update for poppler fixes the following issues:

  • CVE-2022-38784: Fixed integer overflow in the JBIG2 decoder (bsc#1202692).
  • CVE-2019-13283: Fixed heap-based buffer over-read that could be triggered by sending a crafted PDF document to the pdftotext tool (bsc#1140877).
Record
SUSE-SU-2023:0480-1
Updated
2026-11-02
OSVSUSE-SU-2023:0494-1 No score

Security update for poppler

This update for poppler fixes the following issues:

  • CVE-2022-38784: Fixed integer overflow in the JBIG2 decoder (bsc#1202692).
  • CVE-2019-13283: Fixed heap-based buffer over-read that could be triggered by sending a crafted PDF document to the pdftotext tool (bsc#1140877).
Record
SUSE-SU-2023:0494-1
Updated
2026-11-02
OSVSUSE-SU-2023:0495-1 No score

Security update for poppler

This update for poppler fixes the following issues:

  • CVE-2022-38784: Fixed integer overflow in the JBIG2 decoder (bsc#1202692).
Record
SUSE-SU-2023:0495-1
Updated
2026-11-02
OSVSUSE-SU-2023:0677-1 No score

Security update for poppler

This update for poppler fixes the following issues:

  • CVE-2022-38784: Fixed integer overflow in the JBIG2 decoder (bsc#1202692).

Bugfixes:

  • Fixed issue where some PDF generators generate PDF with some wrong numbers in entry table, but the content is still valid (bsc#1181551).
Record
SUSE-SU-2023:0677-1
Updated
2026-11-02
OSVUSN-5606-1 No score

poppler vulnerability

It was discovered that poppler incorrectly handled certain PDF. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.

Record
USN-5606-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
poppler
AlmaLinux:9
 before 21.01.0-14.el9
21.01.0-14.el9
poppler-cpp
AlmaLinux:9
 before 21.01.0-14.el9
21.01.0-14.el9
poppler-cpp-devel
AlmaLinux:9
 before 21.01.0-14.el9
21.01.0-14.el9
poppler-devel
AlmaLinux:9
 before 21.01.0-14.el9
21.01.0-14.el9
poppler-glib
AlmaLinux:9
 before 21.01.0-14.el9
21.01.0-14.el9
poppler-glib-devel
AlmaLinux:9
 before 21.01.0-14.el9
21.01.0-14.el9
poppler-qt5
AlmaLinux:9
 before 21.01.0-14.el9
21.01.0-14.el9
poppler-qt5-devel
AlmaLinux:9
 before 21.01.0-14.el9
21.01.0-14.el9
poppler-utils
AlmaLinux:9
 before 21.01.0-14.el9
21.01.0-14.el9
poppler
AlmaLinux:8
 before 20.11.0-6.el8
20.11.0-6.el8
Show 127 moreShow less
Affected packages
PackageAffectedFixed
poppler-cpp
AlmaLinux:8
 before 20.11.0-6.el8
20.11.0-6.el8
poppler-cpp-devel
AlmaLinux:8
 before 20.11.0-6.el8
20.11.0-6.el8
poppler-devel
AlmaLinux:8
 before 20.11.0-6.el8
20.11.0-6.el8
poppler-glib
AlmaLinux:8
 before 20.11.0-6.el8
20.11.0-6.el8
poppler-glib-devel
AlmaLinux:8
 before 20.11.0-6.el8
20.11.0-6.el8
poppler-qt5
AlmaLinux:8
 before 20.11.0-6.el8
20.11.0-6.el8
poppler-qt5-devel
AlmaLinux:8
 before 20.11.0-6.el8
20.11.0-6.el8
poppler-utils
AlmaLinux:8
 before 20.11.0-6.el8
20.11.0-6.el8
poppler
TuxCare:CentOS:7
 before 0.26.5-43.el7.1.tuxcare.els1
0.26.5-43.el7.1.tuxcare.els1
poppler-cpp
TuxCare:CentOS:7
 before 0.26.5-43.el7.1.tuxcare.els1
0.26.5-43.el7.1.tuxcare.els1
poppler-cpp-devel
TuxCare:CentOS:7
 before 0.26.5-43.el7.1.tuxcare.els1
0.26.5-43.el7.1.tuxcare.els1
poppler-demos
TuxCare:CentOS:7
 before 0.26.5-43.el7.1.tuxcare.els1
0.26.5-43.el7.1.tuxcare.els1
poppler-devel
TuxCare:CentOS:7
 before 0.26.5-43.el7.1.tuxcare.els1
0.26.5-43.el7.1.tuxcare.els1
poppler-glib
TuxCare:CentOS:7
 before 0.26.5-43.el7.1.tuxcare.els1
0.26.5-43.el7.1.tuxcare.els1
poppler-glib-devel
TuxCare:CentOS:7
 before 0.26.5-43.el7.1.tuxcare.els1
0.26.5-43.el7.1.tuxcare.els1
poppler-qt
TuxCare:CentOS:7
 before 0.26.5-43.el7.1.tuxcare.els1
0.26.5-43.el7.1.tuxcare.els1
poppler-qt-devel
TuxCare:CentOS:7
 before 0.26.5-43.el7.1.tuxcare.els1
0.26.5-43.el7.1.tuxcare.els1
poppler-utils
TuxCare:CentOS:7
 before 0.26.5-43.el7.1.tuxcare.els1
0.26.5-43.el7.1.tuxcare.els1
poppler
Debian:12
 before 22.08.0-2.1
22.08.0-2.1
poppler
Debian:13
 before 22.08.0-2.1
22.08.0-2.1
poppler
Debian:14
 before 22.08.0-2.1
22.08.0-2.1
poppler
Debian:10
From an advisory covering 9 CVEs
 before 0.71.0-5+deb10u1, plus listed versions
0.71.0-5
0.71.0-5+deb10u1
poppler
Debian:11
From an advisory covering 2 CVEs
 before 20.09.0-3.1+deb11u1, plus listed versions
20.09.0-3.1
20.09.0-3.1+deb11u1
Poppler_jll
Julia
 before 23.12.0+0
23.12.0+0
poppler
Mageia:8
 before 20.12.1-1.2.mga8
20.12.1-1.2.mga8
poppler
openEuler:20.03-LTS-SP1
 before 0.67.0-8.oe1
0.67.0-8.oe1
poppler
openEuler:20.03-LTS-SP3
 before 0.67.0-8.oe1
0.67.0-8.oe1
poppler
openEuler:22.03-LTS
 before 0.90.0-3.oe2203
0.90.0-3.oe2203
poppler
Red Hat:enterprise_linux:9::appstream
 before 0:21.01.0-14.el9
0:21.01.0-14.el9
poppler-cpp
Red Hat:enterprise_linux:9::appstream
 before 0:21.01.0-14.el9
0:21.01.0-14.el9
poppler-cpp-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:21.01.0-14.el9
0:21.01.0-14.el9
poppler-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:21.01.0-14.el9
0:21.01.0-14.el9
poppler-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:21.01.0-14.el9
0:21.01.0-14.el9
poppler-glib
Red Hat:enterprise_linux:9::appstream
 before 0:21.01.0-14.el9
0:21.01.0-14.el9
poppler-glib-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:21.01.0-14.el9
0:21.01.0-14.el9
poppler-qt5
Red Hat:enterprise_linux:9::appstream
 before 0:21.01.0-14.el9
0:21.01.0-14.el9
poppler-qt5-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:21.01.0-14.el9
0:21.01.0-14.el9
poppler-utils
Red Hat:enterprise_linux:9::appstream
 before 0:21.01.0-14.el9
0:21.01.0-14.el9
poppler-utils-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:21.01.0-14.el9
0:21.01.0-14.el9
poppler-cpp-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:21.01.0-14.el9
0:21.01.0-14.el9
poppler-cpp-devel
Red Hat:enterprise_linux:9::crb
 before 0:21.01.0-14.el9
0:21.01.0-14.el9
poppler-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:21.01.0-14.el9
0:21.01.0-14.el9
poppler-debugsource
Red Hat:enterprise_linux:9::crb
 before 0:21.01.0-14.el9
0:21.01.0-14.el9
poppler-devel
Red Hat:enterprise_linux:9::crb
 before 0:21.01.0-14.el9
0:21.01.0-14.el9
poppler-glib-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:21.01.0-14.el9
0:21.01.0-14.el9
poppler-glib-devel
Red Hat:enterprise_linux:9::crb
 before 0:21.01.0-14.el9
0:21.01.0-14.el9
poppler-qt5-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:21.01.0-14.el9
0:21.01.0-14.el9
poppler-qt5-devel
Red Hat:enterprise_linux:9::crb
 before 0:21.01.0-14.el9
0:21.01.0-14.el9
poppler-utils-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:21.01.0-14.el9
0:21.01.0-14.el9
poppler
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-6.el8
0:20.11.0-6.el8
poppler-cpp-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-6.el8
0:20.11.0-6.el8
poppler-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-6.el8
0:20.11.0-6.el8
poppler-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-6.el8
0:20.11.0-6.el8
poppler-glib
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-6.el8
0:20.11.0-6.el8
poppler-glib-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-6.el8
0:20.11.0-6.el8
poppler-qt5
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-6.el8
0:20.11.0-6.el8
poppler-qt5-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-6.el8
0:20.11.0-6.el8
poppler-utils
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-6.el8
0:20.11.0-6.el8
poppler-utils-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:20.11.0-6.el8
0:20.11.0-6.el8
poppler-cpp
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-6.el8
0:20.11.0-6.el8
poppler-cpp-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-6.el8
0:20.11.0-6.el8
poppler-cpp-devel
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-6.el8
0:20.11.0-6.el8
poppler-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-6.el8
0:20.11.0-6.el8
poppler-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-6.el8
0:20.11.0-6.el8
poppler-devel
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-6.el8
0:20.11.0-6.el8
poppler-glib-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-6.el8
0:20.11.0-6.el8
poppler-glib-devel
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-6.el8
0:20.11.0-6.el8
poppler-qt5-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-6.el8
0:20.11.0-6.el8
poppler-qt5-devel
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-6.el8
0:20.11.0-6.el8
poppler-utils-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:20.11.0-6.el8
0:20.11.0-6.el8
poppler
Rocky Linux:8
 before 0:20.11.0-6.el8
0:20.11.0-6.el8
poppler
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 2 CVEs
 before 0.62.0-150000.4.9.1
0.62.0-150000.4.9.1
poppler
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 2 CVEs
 before 0.62.0-150000.4.9.1
0.62.0-150000.4.9.1
poppler
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 2 CVEs
 before 0.62.0-150000.4.9.1
0.62.0-150000.4.9.1
poppler
openSUSE:Leap 15.4
From an advisory covering 2 CVEs
 before 0.62.0-150000.4.9.1
0.62.0-150000.4.9.1
poppler
SUSE:OpenStack Cloud 9
From an advisory covering 2 CVEs
 before 0.43.0-16.22.1
0.43.0-16.22.1
poppler-qt
SUSE:OpenStack Cloud 9
From an advisory covering 2 CVEs
 before 0.43.0-16.22.1
0.43.0-16.22.1
poppler
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 2 CVEs
 before 0.43.0-16.22.1
0.43.0-16.22.1
poppler-qt
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 2 CVEs
 before 0.43.0-16.22.1
0.43.0-16.22.1
poppler
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 2 CVEs
 before 0.43.0-16.22.1
0.43.0-16.22.1
poppler-qt
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 2 CVEs
 before 0.43.0-16.22.1
0.43.0-16.22.1
poppler
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 2 CVEs
 before 0.43.0-16.22.1
0.43.0-16.22.1
poppler-qt
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 2 CVEs
 before 0.43.0-16.22.1
0.43.0-16.22.1
poppler
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 2 CVEs
 before 0.43.0-16.22.1
0.43.0-16.22.1
poppler-qt
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 2 CVEs
 before 0.43.0-16.22.1
0.43.0-16.22.1
poppler
SUSE:Linux Enterprise Server 12 SP4-ESPOS
From an advisory covering 2 CVEs
 before 0.43.0-16.22.1
0.43.0-16.22.1
poppler-qt
SUSE:Linux Enterprise Server 12 SP4-ESPOS
From an advisory covering 2 CVEs
 before 0.43.0-16.22.1
0.43.0-16.22.1
poppler
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 2 CVEs
 before 0.43.0-16.22.1
0.43.0-16.22.1
poppler-qt
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 2 CVEs
 before 0.43.0-16.22.1
0.43.0-16.22.1
poppler
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 2 CVEs
 before 0.43.0-16.22.1
0.43.0-16.22.1
poppler-qt
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 2 CVEs
 before 0.43.0-16.22.1
0.43.0-16.22.1
poppler
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 2 CVEs
 before 0.43.0-16.22.1
0.43.0-16.22.1
poppler-qt
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 2 CVEs
 before 0.43.0-16.22.1
0.43.0-16.22.1
poppler
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 22.01.0-150400.3.3.1
22.01.0-150400.3.3.1
poppler
SUSE:Linux Enterprise Module for Package Hub 15 SP4
 before 22.01.0-150400.3.3.1
22.01.0-150400.3.3.1
poppler-qt5
SUSE:Linux Enterprise Module for Package Hub 15 SP4
 before 22.01.0-150400.3.3.1
22.01.0-150400.3.3.1
poppler
openSUSE:Leap 15.4
 before 22.01.0-150400.3.3.1
22.01.0-150400.3.3.1
poppler-qt5
openSUSE:Leap 15.4
 before 22.01.0-150400.3.3.1
22.01.0-150400.3.3.1
poppler-qt6
openSUSE:Leap 15.4
 before 22.01.0-150400.3.3.1
22.01.0-150400.3.3.1
poppler
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 0.79.0-150200.3.8.1
0.79.0-150200.3.8.1
poppler
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 0.79.0-150200.3.8.1
0.79.0-150200.3.8.1
poppler
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 0.79.0-150200.3.8.1
0.79.0-150200.3.8.1
poppler
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 0.79.0-150200.3.8.1
0.79.0-150200.3.8.1
poppler
SUSE:Linux Enterprise Real Time 15 SP3
 before 0.79.0-150200.3.8.1
0.79.0-150200.3.8.1
poppler
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 0.79.0-150200.3.8.1
0.79.0-150200.3.8.1
poppler
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 0.79.0-150200.3.8.1
0.79.0-150200.3.8.1
poppler
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 0.79.0-150200.3.8.1
0.79.0-150200.3.8.1
poppler
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 0.79.0-150200.3.8.1
0.79.0-150200.3.8.1
poppler
SUSE:Manager Proxy 4.2
 before 0.79.0-150200.3.8.1
0.79.0-150200.3.8.1
poppler
SUSE:Manager Server 4.2
 before 0.79.0-150200.3.8.1
0.79.0-150200.3.8.1
poppler
SUSE:Enterprise Storage 7
 before 0.79.0-150200.3.8.1
0.79.0-150200.3.8.1
poppler
SUSE:Enterprise Storage 7.1
 before 0.79.0-150200.3.8.1
0.79.0-150200.3.8.1
poppler
openSUSE:Leap 15.4
 before 0.79.0-150200.3.8.1
0.79.0-150200.3.8.1
poppler
Ubuntu:Pro:16.04:LTS
 before 0.41.0-0ubuntu1.16+esm2, plus listed versions
0.33.0-0ubuntu30.37.0-0ubuntu10.38.0-0ubuntu10.41.0-0ubuntu10.41.0-0ubuntu1.1
Show 16 moreShow less
0.41.0-0ubuntu1.20.41.0-0ubuntu1.30.41.0-0ubuntu1.40.41.0-0ubuntu1.50.41.0-0ubuntu1.60.41.0-0ubuntu1.70.41.0-0ubuntu1.80.41.0-0ubuntu1.90.41.0-0ubuntu1.100.41.0-0ubuntu1.110.41.0-0ubuntu1.120.41.0-0ubuntu1.130.41.0-0ubuntu1.140.41.0-0ubuntu1.150.41.0-0ubuntu1.160.41.0-0ubuntu1.16+esm1
0.41.0-0ubuntu1.16+esm2
emscripten
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.22.1-1build1
 None known
poppler
Ubuntu:18.04:LTS
 before 0.62.0-2ubuntu2.14, plus listed versions
0.57.0-2ubuntu40.57.0-2ubuntu50.62.0-1ubuntu10.62.0-2ubuntu10.62.0-2ubuntu2
Show 12 moreShow less
0.62.0-2ubuntu2.10.62.0-2ubuntu2.20.62.0-2ubuntu2.40.62.0-2ubuntu2.50.62.0-2ubuntu2.60.62.0-2ubuntu2.70.62.0-2ubuntu2.80.62.0-2ubuntu2.90.62.0-2ubuntu2.100.62.0-2ubuntu2.110.62.0-2ubuntu2.120.62.0-2ubuntu2.13
0.62.0-2ubuntu2.14
emscripten
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.22.1-1build1
 None known
poppler
Ubuntu:20.04:LTS
 before 0.86.1-0ubuntu1.1, plus listed versions
0.80.0-0ubuntu10.80.0-0ubuntu30.80.0-0ubuntu40.80.0-0ubuntu50.85.0-1ubuntu10.85.0-1ubuntu30.86.1-0ubuntu1
0.86.1-0ubuntu1.1
emscripten
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.0.13~dfsg-13.1.1~dfsg+~1.39.6-5ubuntu43.1.2~dfsg+~1.39.6-6ubuntu13.1.3~dfsg-4ubuntu13.1.3~dfsg-5ubuntu13.1.4~dfsg-7ubuntu13.1.5~dfsg-3ubuntu1
 None known
poppler
Ubuntu:22.04:LTS
 before 22.02.0-2ubuntu0.1, plus listed versions
21.06.1-121.11.0-1~ubuntu222.02.0-2
22.02.0-2ubuntu0.1
emscripten
Ubuntu:24.04:LTS
 All versions, plus listed versions
3.1.6~dfsg-53.1.6~dfsg-63.1.6~dfsg-7
 None known
emscripten
Ubuntu:25.10
 All versions, plus listed versions
3.1.69+dfsg-13.1.69+dfsg-3
 None known
emscripten
Ubuntu:26.10
 All versions, plus listed versions
3.1.69+dfsg-46.0.5+dfsg+~1.41.5-2
 None known
emscripten
Ubuntu:26.04:LTS
 All versions, plus listed versions
3.1.69+dfsg-33.1.69+dfsg-4
 None known
poppler
Ubuntu:Pro:16.04:LTS
 before 0.41.0-0ubuntu1.16+esm1, plus listed versions
0.33.0-0ubuntu30.37.0-0ubuntu10.38.0-0ubuntu10.41.0-0ubuntu10.41.0-0ubuntu1.1
Show 15 moreShow less
0.41.0-0ubuntu1.20.41.0-0ubuntu1.30.41.0-0ubuntu1.40.41.0-0ubuntu1.50.41.0-0ubuntu1.60.41.0-0ubuntu1.70.41.0-0ubuntu1.80.41.0-0ubuntu1.90.41.0-0ubuntu1.100.41.0-0ubuntu1.110.41.0-0ubuntu1.120.41.0-0ubuntu1.130.41.0-0ubuntu1.140.41.0-0ubuntu1.150.41.0-0ubuntu1.16
0.41.0-0ubuntu1.16+esm1
poppler
Ubuntu:18.04:LTS
 before 0.62.0-2ubuntu2.13, plus listed versions
0.57.0-2ubuntu40.57.0-2ubuntu50.62.0-1ubuntu10.62.0-2ubuntu10.62.0-2ubuntu2
Show 11 moreShow less
0.62.0-2ubuntu2.10.62.0-2ubuntu2.20.62.0-2ubuntu2.40.62.0-2ubuntu2.50.62.0-2ubuntu2.60.62.0-2ubuntu2.70.62.0-2ubuntu2.80.62.0-2ubuntu2.90.62.0-2ubuntu2.100.62.0-2ubuntu2.110.62.0-2ubuntu2.12
0.62.0-2ubuntu2.13
poppler
openSUSE:Tumbleweed
 before 22.09.0-1.1
22.09.0-1.1

History

History
RecordedChangedSources
affected, factsOSV
aliases, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-38784 is a high vulnerability (CVSS 7.8) in Freedesktop Poppler, published August 30, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.63%, the 50th percentile. Fixed in poppler 21.01.0-14.el9.

References

Show 53 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open