CVE-2022-38171
Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream:...
Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2021-30860 (Apple CoreGraphics).
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2021-30860 (Apple CoreGraphics).
- Record
CVE-2022-38171- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
CVE List No score
Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2021-30860 (Apple CoreGraphics).
- Record
CVE-2022-38171- Updated
- 2026-11-02
EUVDEUVD-2022-40767 No score
Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2021-30860 (Apple CoreGraphics).
- Record
EUVD-2022-40767- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wxgh-95h6-c68v
Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream:...
Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readSymbolDictSeg() in JBIG2Stream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2021-30860 (Apple CoreGraphics).
- Record
GHSA-wxgh-95h6-c68v- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
OSVALPINE-CVE-2022-38171
Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2021-30860 (Apple CoreGraphics).
- Record
ALPINE-CVE-2022-38171- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVJLSEC-2026-80
Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2021-30860 (Apple CoreGraphics).
- Record
JLSEC-2026-80- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-38171
Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2021-30860 (Apple CoreGraphics).
- Record
UBUNTU-CVE-2022-38171- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV No score
Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2021-30860 (Apple CoreGraphics).
- Record
CVE-2022-38171- Updated
- 2026-11-02
OSVMGASA-2022-0320 No score
Updated xpdf packages fix security vulnerability
In Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the image, leading to an unknown integer-related vulnerability in Stream.cc. (CVE-2022-24106)
Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc. (CVE-2022-24107)
Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. (CVE-2022-38171)
- Record
MGASA-2022-0320- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xpdfAlpine:v3.19 |
before 4.04-r0 | 4.04-r0 |
xpdfAlpine:v3.20 |
before 4.04-r0 | 4.04-r0 |
xpdfAlpine:v3.21 |
before 4.04-r0 | 4.04-r0 |
xpdfAlpine:v3.22 |
before 4.04-r0 | 4.04-r0 |
xpdfAlpine:v3.23 |
before 4.04-r0 | 4.04-r0 |
xpdfAlpine:v3.24 |
before 4.04-r0 | 4.04-r0 |
Poppler_jllJulia |
before 23.12.0+0 | 23.12.0+0 |
xpdfMageia:8 From an advisory covering 3 CVEs |
before 4.04-1.mga8 | 4.04-1.mga8 |
texlive-binUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 2015.20150524.37493-5build12015.20150524.37493-72015.20150524.37493-7build12015.20150524.37493-7build42015.20160222.37495-12015.20160222.37495-1ubuntu0.12015.20160222.37495-1ubuntu0.1+esm1 |
None known |
ipeUbuntu:16.04:LTS |
All versions, plus listed versions 7.1.4-2.17.1.8-17.1.10-17.1.10-1.1 |
None known |
Show 16 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xpdfUbuntu:16.04:LTS |
All versions, plus listed versions 3.03-17ubuntu23.03-17ubuntu33.03-17ubuntu53.03-183.04-13.04-1build13.04-1ubuntu13.04-1ubuntu1.1 |
None known |
texlive-binUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2017.20170613.44572-5build12017.20170613.44572-5build22017.20170613.44572-62017.20170613.44572-6build12017.20170613.44572-6ubuntu1 Show 4 moreShow less2017.20170613.44572-8build12017.20170613.44572-8ubuntu0.12017.20170613.44572-8ubuntu0.22017.20170613.44572-8ubuntu0.2+esm1 |
None known |
ipeUbuntu:18.04:LTS |
All versions, plus listed versions 7.2.7-27.2.7-3 |
None known |
xpdfUbuntu:18.04:LTS |
All versions, plus listed versions 3.04-4build13.04-53.04-5ubuntu23.04-6ubuntu13.04-7 |
None known |
texlive-binUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 2019.20190605.51237-2build12019.20190605.51237-32019.20190605.51237-3build12019.20190605.51237-3build22019.20190605.51237-3ubuntu0.12019.20190605.51237-3ubuntu0.22019.20190605.51237-3ubuntu0.2+esm1 |
None known |
ipeUbuntu:20.04:LTS |
All versions, plus listed versions 7.2.9-17.2.13-27.2.13-2build1 |
None known |
ipeUbuntu:22.04:LTS |
All versions, plus listed versions 7.2.23+dfsg1-27.2.24+dfsg1-17.2.24+dfsg1-1build1 |
None known |
texlive-binUbuntu:22.04:LTS |
All versions, plus listed versions 2020.20200327.54578-72020.20200327.54578-7build12021.20210626.59705-12021.20210626.59705-1build12021.20210626.59705-1ubuntu0.12021.20210626.59705-1ubuntu0.22021.20210626.59705-1ubuntu0.3 |
None known |
ipeUbuntu:24.04:LTS |
All versions, plus listed versions 7.2.27+dfsg1-27.2.28-27.2.28-2.1build27.2.28-2.1build37.2.28-2.1build4 |
None known |
texlive-binUbuntu:24.04:LTS |
All versions, plus listed versions 2023.20230311.66589-62023.20230311.66589-72023.20230311.66589-82023.20230311.66589-8build12023.20230311.66589-92023.20230311.66589-9build22023.20230311.66589-9build3 |
None known |
ipeUbuntu:25.10 |
All versions, plus listed versions 7.2.30-1build1 |
None known |
texlive-binUbuntu:25.10 |
All versions, plus listed versions 2024.20240313.70630+ds-62024.20240313.70630+ds-6ubuntu2 |
None known |
ipeUbuntu:26.10 |
All versions, plus listed versions 7.2.30-1build27.2.30-2 |
None known |
texlive-binUbuntu:26.10 |
All versions, plus listed versions 2025.20250727.75242+ds-5build12026.20260303.78225+ds-42026.20260303.78225+ds-5ubuntu1 |
None known |
ipeUbuntu:26.04:LTS |
All versions, plus listed versions 7.2.30-1build17.2.30-1build2 |
None known |
texlive-binUbuntu:26.04:LTS |
All versions, plus listed versions 2024.20240313.70630+ds-6ubuntu22025.20250727.75242+ds-4ubuntu22025.20250727.75242+ds-52025.20250727.75242+ds-5build1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-38171 is a high vulnerability (CVSS 7.8) in Xpdfreader Xpdf, published August 22, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. Fixed in xpdf 4.04-r0.
References
xpdfreader.com/security-fixes.html
dl.xpdfreader.com/xpdf-4.04.tar.gz
cve.org/CVERecord?id=CVE-2021-30860
googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html
github.com/jeffssh/CVE-2021-30860
openwall.com/lists/oss-security/2022/09/02/11
Show 11 moreShow less
nvd.nist.gov/vuln/detail/CVE-2022-38171
gist.github.com/zmanion/b2ed0d1a0cec163ecd07d5e3d9740dc6
security.alpinelinux.org/vuln/CVE-2022-38171
advisories.mageia.org/MGASA-2022-0320.html
bugs.mageia.org/show_bug.cgi?id=30804
ubuntu.com/security/CVE-2022-38171