CVE-2022-27811

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or...

9.8 CriticalFix available

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

3.25%Up 2.2 points since Mar 24, 2022

What each source reports

NVD Score used 9.8

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename.

Record: CVE-2022-27811
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-78
Updated: 2026-11-02

CVE List No score

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename.

Record: CVE-2022-27811
Updated: 2026-11-02

EUVDEUVD-2022-32306 No score

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename.

Record: EUVD-2022-32306
Updated: 2026-11-03

GitHub AdvisoriesGHSA-2pph-3mjw-53c3 9.8

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or...

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename.

Record: GHSA-2pph-3mjw-53c3
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-78
Updated: 2026-11-02

OSVDEBIAN-CVE-2022-27811 9.8

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename.

Record: DEBIAN-CVE-2022-27811
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-03

OSVUBUNTU-CVE-2022-27811 9.8

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename.

Record: UBUNTU-CVE-2022-27811
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV No score

GNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or image filename.

Record: CVE-2022-27811
Updated: 2026-11-02

Affected products

gnome ocrfeeder

Affected packages

Affected packages
Package	Affected	Fixed
`ocrfeeder` Debian:12	before 0.8.5-1	0.8.5-1
`ocrfeeder` Debian:14	before 0.8.5-1, plus listed versions 0.6.6+dfsg1-10.6.6-10.6.6-20.6.6-30.7.10-1 Show 26 moreShow less 0.7.11-10.7.11-20.7.11-30.7.11-40.7.11-50.7.11-60.7.3-10.7.4-10.7.5-10.7.6-10.7.7-10.7.7-20.7.9-10.8-10.8-20.8.1+git20200107.8615aff-10.8.1+git20200107.8615aff-1~exp10.8.1+git20200128.b945089-10.8.1-10.8.1-20.8.1-30.8.1-40.8.2+git20200213.e00176e-10.8.3-10.8.3-20.8.3-3	0.8.5-1
`ocrfeeder` Ubuntu:16.04:LTS	All versions, plus listed versions 0.8.1-2	None known
`ocrfeeder` Ubuntu:18.04:LTS	All versions, plus listed versions 0.8.1-30.8.1-4	None known
`ocrfeeder` Ubuntu:20.04:LTS	All versions, plus listed versions 0.8.1-40.8.1-4build10.8.1+git20200107.8615aff-10.8.1+git20200128.b945089-10.8.1+git20200128.b945089-1ubuntu1	None known
`ocrfeeder` Ubuntu:22.04:LTS	All versions, plus listed versions 0.8.3-3	None known
`ocrfeeder` Ubuntu:24.04:LTS	All versions, plus listed versions 0.8.5-1	None known
`ocrfeeder` Ubuntu:25.10	All versions, plus listed versions 0.8.5-1	None known
`ocrfeeder` Ubuntu:26.10	All versions, plus listed versions 0.8.5-3	None known
`ocrfeeder` Ubuntu:26.04:LTS	All versions, plus listed versions 0.8.5-10.8.5-20.8.5-3	None known

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-27811 is a critical vulnerability (CVSS 9.8) in Gnome Ocrfeeder, published March 24, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.25%, the 88th percentile. Fixed in ocrfeeder 0.8.5-1.

References

Show 4 moreShow less