{"id":"CVE-2022-38784","aliases":["ALSA-2023:2259","ALSA-2023:2810","BELL-CVE-2022-38784","CLSA-2024-1721206996","DEBIAN-CVE-2022-38784","DLA-3120-1","DSA-5224-1","EUVD-2022-41347","GHSA-5557-33mq-5995","JLSEC-2026-81","MGASA-2022-0386","OESA-2022-1906","RHSA-2023:2259","RHSA-2023:2810","RLSA-2023:2810","SUSE-SU-2023:0480-1","SUSE-SU-2023:0494-1","SUSE-SU-2023:0495-1","SUSE-SU-2023:0677-1","UBUNTU-CVE-2022-38784","USN-5606-1","openSUSE-SU-2024:12362-1"],"status":"published","title":"Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder ...","description":"Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00634,"percentile":0.50676,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2022-08-30T02:58:33Z","modified":"2026-11-03T08:03:54Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"poppler","fixed_in":["21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"poppler-cpp","fixed_in":["21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"poppler-cpp-devel","fixed_in":["21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"poppler-devel","fixed_in":["21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"poppler-glib","fixed_in":["21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"poppler-glib-devel","fixed_in":["21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"poppler-qt5","fixed_in":["21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"poppler-qt5-devel","fixed_in":["21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"poppler-utils","fixed_in":["21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"poppler","fixed_in":["20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"poppler-cpp","fixed_in":["20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"poppler-cpp-devel","fixed_in":["20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"poppler-devel","fixed_in":["20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"poppler-glib","fixed_in":["20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"poppler-glib-devel","fixed_in":["20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"poppler-qt5","fixed_in":["20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"poppler-qt5-devel","fixed_in":["20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"poppler-utils","fixed_in":["20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"poppler","fixed_in":["0.26.5-43.el7.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"poppler-cpp","fixed_in":["0.26.5-43.el7.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"poppler-cpp-devel","fixed_in":["0.26.5-43.el7.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"poppler-demos","fixed_in":["0.26.5-43.el7.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"poppler-devel","fixed_in":["0.26.5-43.el7.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"poppler-glib","fixed_in":["0.26.5-43.el7.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"poppler-glib-devel","fixed_in":["0.26.5-43.el7.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"poppler-qt","fixed_in":["0.26.5-43.el7.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"poppler-qt-devel","fixed_in":["0.26.5-43.el7.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"poppler-utils","fixed_in":["0.26.5-43.el7.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"poppler","fixed_in":["22.08.0-2.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"poppler","fixed_in":["22.08.0-2.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"poppler","fixed_in":["22.08.0-2.1"],"sources":["osv"]},{"ecosystem":"Julia","package":"Poppler_jll","fixed_in":["23.12.0+0"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"poppler","fixed_in":["20.12.1-1.2.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"poppler","fixed_in":["0.67.0-8.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"poppler","fixed_in":["0.67.0-8.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"poppler","fixed_in":["0.90.0-3.oe2203"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler","fixed_in":["0:21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-cpp","fixed_in":["0:21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-cpp-debuginfo","fixed_in":["0:21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-debuginfo","fixed_in":["0:21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-debugsource","fixed_in":["0:21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-glib","fixed_in":["0:21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-glib-debuginfo","fixed_in":["0:21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-qt5","fixed_in":["0:21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-qt5-debuginfo","fixed_in":["0:21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-utils","fixed_in":["0:21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-utils-debuginfo","fixed_in":["0:21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-cpp-debuginfo","fixed_in":["0:21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-cpp-devel","fixed_in":["0:21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-debuginfo","fixed_in":["0:21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-debugsource","fixed_in":["0:21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-devel","fixed_in":["0:21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-glib-debuginfo","fixed_in":["0:21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-glib-devel","fixed_in":["0:21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-qt5-debuginfo","fixed_in":["0:21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-qt5-devel","fixed_in":["0:21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-utils-debuginfo","fixed_in":["0:21.01.0-14.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler","fixed_in":["0:20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-cpp-debuginfo","fixed_in":["0:20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-debuginfo","fixed_in":["0:20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-debugsource","fixed_in":["0:20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-glib","fixed_in":["0:20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-glib-debuginfo","fixed_in":["0:20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-qt5","fixed_in":["0:20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-qt5-debuginfo","fixed_in":["0:20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-utils","fixed_in":["0:20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-utils-debuginfo","fixed_in":["0:20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-cpp","fixed_in":["0:20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-cpp-debuginfo","fixed_in":["0:20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-cpp-devel","fixed_in":["0:20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-debuginfo","fixed_in":["0:20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-debugsource","fixed_in":["0:20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-devel","fixed_in":["0:20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-glib-debuginfo","fixed_in":["0:20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-glib-devel","fixed_in":["0:20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-qt5-debuginfo","fixed_in":["0:20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-qt5-devel","fixed_in":["0:20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-utils-debuginfo","fixed_in":["0:20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"poppler","fixed_in":["0:20.11.0-6.el8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"poppler","fixed_in":["22.01.0-150400.3.3.1","0.79.0-150200.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"poppler","fixed_in":["22.01.0-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"poppler-qt5","fixed_in":["22.01.0-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"poppler","fixed_in":["22.01.0-150400.3.3.1","0.79.0-150200.3.8.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"poppler-qt5","fixed_in":["22.01.0-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"poppler-qt6","fixed_in":["22.01.0-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"poppler","fixed_in":["0.79.0-150200.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"poppler","fixed_in":["0.79.0-150200.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"poppler","fixed_in":["0.79.0-150200.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"poppler","fixed_in":["0.79.0-150200.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"poppler","fixed_in":["0.79.0-150200.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"poppler","fixed_in":["0.79.0-150200.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"poppler","fixed_in":["0.79.0-150200.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"poppler","fixed_in":["0.79.0-150200.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"poppler","fixed_in":["0.79.0-150200.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"poppler","fixed_in":["0.79.0-150200.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"poppler","fixed_in":["0.79.0-150200.3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"poppler","fixed_in":["0.79.0-150200.3.8.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"poppler","fixed_in":["0.41.0-0ubuntu1.16+esm2","0.41.0-0ubuntu1.16+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"poppler","fixed_in":["0.62.0-2ubuntu2.14","0.62.0-2ubuntu2.13"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"poppler","fixed_in":["0.86.1-0ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"poppler","fixed_in":["22.02.0-2ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"poppler","fixed_in":["22.09.0-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"poppler-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"poppler-cpp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"poppler-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"poppler-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"poppler-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"poppler-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"poppler-qt5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"poppler-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"poppler-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"poppler-cpp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"poppler-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"poppler-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"poppler-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"poppler-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"poppler-qt5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"poppler-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.5-43.el7.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"poppler-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.5-43.el7.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"poppler-cpp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.5-43.el7.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"poppler-demos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.5-43.el7.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"poppler-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.5-43.el7.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"poppler-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.5-43.el7.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"poppler-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.5-43.el7.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.5-43.el7.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"poppler-qt-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.5-43.el7.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"poppler-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.26.5-43.el7.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.08.0-2.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.08.0-2.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.08.0-2.1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.71.0-5+deb10u1"}]}],"versions":["0.71.0-5"],"bundled":9},{"source":"osv","ecosystem":"Debian:11","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.09.0-3.1+deb11u1"}]}],"versions":["20.09.0-3.1"],"bundled":2},{"source":"osv","ecosystem":"Julia","package":"Poppler_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"23.12.0+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20.12.1-1.2.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.67.0-8.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.67.0-8.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.90.0-3.oe2203"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-cpp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-qt5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"poppler-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-cpp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-cpp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-qt5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-qt5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"poppler-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.01.0-14.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-cpp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-glib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-qt5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"poppler-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-cpp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-cpp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-glib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-glib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-qt5-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-qt5-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"poppler-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.11.0-6.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-150000.4.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-150000.4.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-150000.4.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-150000.4.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-ESPOS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-ESPOS","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"poppler-qt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.43.0-16.22.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.01.0-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.01.0-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"poppler-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.01.0-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.01.0-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"poppler-qt5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.01.0-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"poppler-qt6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.01.0-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.8.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.79.0-150200.3.8.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.41.0-0ubuntu1.16+esm2"}]}],"versions":["0.33.0-0ubuntu3","0.37.0-0ubuntu1","0.38.0-0ubuntu1","0.41.0-0ubuntu1","0.41.0-0ubuntu1.1","0.41.0-0ubuntu1.2","0.41.0-0ubuntu1.3","0.41.0-0ubuntu1.4","0.41.0-0ubuntu1.5","0.41.0-0ubuntu1.6","0.41.0-0ubuntu1.7","0.41.0-0ubuntu1.8","0.41.0-0ubuntu1.9","0.41.0-0ubuntu1.10","0.41.0-0ubuntu1.11","0.41.0-0ubuntu1.12","0.41.0-0ubuntu1.13","0.41.0-0ubuntu1.14","0.41.0-0ubuntu1.15","0.41.0-0ubuntu1.16","0.41.0-0ubuntu1.16+esm1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"emscripten","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.22.1-1build1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-2ubuntu2.14"}]}],"versions":["0.57.0-2ubuntu4","0.57.0-2ubuntu5","0.62.0-1ubuntu1","0.62.0-2ubuntu1","0.62.0-2ubuntu2","0.62.0-2ubuntu2.1","0.62.0-2ubuntu2.2","0.62.0-2ubuntu2.4","0.62.0-2ubuntu2.5","0.62.0-2ubuntu2.6","0.62.0-2ubuntu2.7","0.62.0-2ubuntu2.8","0.62.0-2ubuntu2.9","0.62.0-2ubuntu2.10","0.62.0-2ubuntu2.11","0.62.0-2ubuntu2.12","0.62.0-2ubuntu2.13"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"emscripten","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.22.1-1build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.86.1-0ubuntu1.1"}]}],"versions":["0.80.0-0ubuntu1","0.80.0-0ubuntu3","0.80.0-0ubuntu4","0.80.0-0ubuntu5","0.85.0-1ubuntu1","0.85.0-1ubuntu3","0.86.1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"emscripten","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.13~dfsg-1","3.1.1~dfsg+~1.39.6-5ubuntu4","3.1.2~dfsg+~1.39.6-6ubuntu1","3.1.3~dfsg-4ubuntu1","3.1.3~dfsg-5ubuntu1","3.1.4~dfsg-7ubuntu1","3.1.5~dfsg-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.02.0-2ubuntu0.1"}]}],"versions":["21.06.1-1","21.11.0-1~ubuntu2","22.02.0-2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"emscripten","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.6~dfsg-5","3.1.6~dfsg-6","3.1.6~dfsg-7"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"emscripten","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.69+dfsg-1","3.1.69+dfsg-3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"emscripten","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.69+dfsg-4","6.0.5+dfsg+~1.41.5-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"emscripten","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.69+dfsg-3","3.1.69+dfsg-4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.41.0-0ubuntu1.16+esm1"}]}],"versions":["0.33.0-0ubuntu3","0.37.0-0ubuntu1","0.38.0-0ubuntu1","0.41.0-0ubuntu1","0.41.0-0ubuntu1.1","0.41.0-0ubuntu1.2","0.41.0-0ubuntu1.3","0.41.0-0ubuntu1.4","0.41.0-0ubuntu1.5","0.41.0-0ubuntu1.6","0.41.0-0ubuntu1.7","0.41.0-0ubuntu1.8","0.41.0-0ubuntu1.9","0.41.0-0ubuntu1.10","0.41.0-0ubuntu1.11","0.41.0-0ubuntu1.12","0.41.0-0ubuntu1.13","0.41.0-0ubuntu1.14","0.41.0-0ubuntu1.15","0.41.0-0ubuntu1.16"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.62.0-2ubuntu2.13"}]}],"versions":["0.57.0-2ubuntu4","0.57.0-2ubuntu5","0.62.0-1ubuntu1","0.62.0-2ubuntu1","0.62.0-2ubuntu2","0.62.0-2ubuntu2.1","0.62.0-2ubuntu2.2","0.62.0-2ubuntu2.4","0.62.0-2ubuntu2.5","0.62.0-2ubuntu2.6","0.62.0-2ubuntu2.7","0.62.0-2ubuntu2.8","0.62.0-2ubuntu2.9","0.62.0-2ubuntu2.10","0.62.0-2ubuntu2.11","0.62.0-2ubuntu2.12"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.86.1-0ubuntu1.1"}]}],"versions":["0.80.0-0ubuntu1","0.80.0-0ubuntu3","0.80.0-0ubuntu4","0.80.0-0ubuntu5","0.85.0-1ubuntu1","0.85.0-1ubuntu3","0.86.1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.02.0-2ubuntu0.1"}]}],"versions":["21.06.1-1","21.11.0-1~ubuntu2","22.02.0-2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"poppler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.09.0-1.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"freedesktop","product":"poppler"}],"references":[{"url":"https://github.com/jeffssh/CVE-2021-30860","tags":["x_transferred","Third Party Advisory","package","web","report"]},{"url":"https://poppler.freedesktop.org/releases.html","tags":["x_transferred","Release Notes","Vendor Advisory","web","report"]},{"url":"https://gitlab.freedesktop.org/poppler/poppler/-/merge_requests/1261/diffs?commit_id=27354e9d9696ee2bc063910a6c9a6b27c5184a52","tags":["x_transferred","Patch","Vendor Advisory","web","report"]},{"url":"http://www.openwall.com/lists/oss-security/2022/09/02/11","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://www.debian.org/security/2022/dsa-5224","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TQAO6O2XHPQHNW2MWOCJJ4C3YWS2VV4K/","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J546EJUKUOPWA3JSLP7DYNBAU3YGNCCW/","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/09/msg00030.html","tags":["mailing-list","x_transferred","Third Party Advisory","article","web"]},{"url":"https://security.gentoo.org/glsa/202209-21","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BGY72LBJMFAKQWC2XH4MRPIGPQLXTFL6/","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NLKN3HJKZSGEEKOF57DM7Q3IB74HP5VW/","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://github.com/zmanion/Vulnerabilities/blob/main/CVE-2022-38171.md","tags":["x_transferred","Exploit","Third Party Advisory","web"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38171","tags":["x_transferred","Third Party Advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E5Z2677EQUWVHJLGSH5DQX53EK6MY2M2/","tags":["vendor-advisory","x_transferred","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38784","tags":["advisory"]},{"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38171","tags":["report"]},{"url":"https://gist.github.com/zmanion/b2ed0d1a0cec163ecd07d5e3d9740dc6","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J546EJUKUOPWA3JSLP7DYNBAU3YGNCCW/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TQAO6O2XHPQHNW2MWOCJJ4C3YWS2VV4K/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BGY72LBJMFAKQWC2XH4MRPIGPQLXTFL6/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NLKN3HJKZSGEEKOF57DM7Q3IB74HP5VW/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E5Z2677EQUWVHJLGSH5DQX53EK6MY2M2/"},{"url":"https://github.com/advisories/GHSA-5557-33mq-5995"},{"url":"https://access.redhat.com/errata/RHSA-2023:2259","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-38784","tags":["report"]},{"url":"https://bugzilla.redhat.com/2124527","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2023-2259.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2810","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2023-2810.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-38784","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2024-1721206996.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/38xxx/CVE-2022-38784.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-38784","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0386.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30805","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2022/09/02/11","tags":["web","article"]},{"url":"https://ubuntu.com/security/notices/USN-5606-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5606-2","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/TQAO6O2XHPQHNW2MWOCJJ4C3YWS2VV4K/","tags":["web"]},{"url":"https://www.debian.org/lts/security/2022/dla-3120","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1906","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2144768","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2259.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38784","tags":["advisory","report"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.8_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2810.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2023:2810","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230480-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1140877","tags":["report"]},{"url":"https://bugzilla.suse.com/1202692","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38784","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230494-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230495-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230677-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1181551","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-38784","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-38784","description":"Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.","status":"published","published":"2022-08-30T02:58:33.566Z","modified":"2024-09-17T03:54:54.096Z","updated_at":"2026-11-02T14:34:37.272373Z"}],"euvd":[{"id":"EUVD-2022-41347","description":"Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.","status":"published","published":"2022-08-30T02:58:33Z","modified":"2024-09-17T03:54:54Z","updated_at":"2026-11-03T00:28:27.555678Z"}],"ghsa":[{"id":"GHSA-5557-33mq-5995","title":"Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder ...","description":"Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.","status":"published","published":"2022-08-31T00:00:25Z","modified":"2023-02-01T05:08:39Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:50:49.403077Z"}],"nvd":[{"id":"CVE-2022-38784","description":"Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.","status":"published","published":"2022-08-30T03:15:07.307Z","modified":"2026-06-17T04:57:10.003Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:07:25.883929Z"}],"osv":[{"id":"BELL-CVE-2022-38784","title":"CVE-2022-38784 does not affect BellSoft software","status":"withdrawn","published":"2022-08-30T03:15:00Z","modified":"2026-01-26T09:47:43.732361Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"DEBIAN-CVE-2022-38784","description":"Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.","status":"published","published":"2022-08-30T03:15:07.307Z","modified":"2026-11-03T08:03:54.409252194Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T08:23:34.488036Z"},{"id":"JLSEC-2026-81","description":"Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.","status":"published","published":"2026-04-13T13:20:05.063Z","modified":"2026-07-18T00:02:23.973296029Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:19.003546Z"},{"id":"OESA-2022-1906","title":"poppler security update","description":"Poppler is a free software utility library for rendering Portable Document Format (PDF) documents. \\Its development is supported by freedesktop.org. It is commonly used on Linux systems,and is used by \\the PDF viewers of the open source GNOME and KDE desktop environments.\r\n\r\nSecurity Fix(es):\r\n\r\nPoppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.(CVE-2022-38784)","status":"published","published":"2022-09-09T11:05:11Z","modified":"2026-08-18T01:17:18.563174213Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2023:2259","title":"Red Hat Security Advisory: poppler security and bug fix update","status":"published","published":"2024-09-16T09:51:19Z","modified":"2026-06-27T10:16:53Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:2810","title":"Red Hat Security Advisory: poppler security update","status":"published","published":"2024-09-16T09:51:29Z","modified":"2026-06-27T10:17:07Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"UBUNTU-CVE-2022-38784","description":"Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.","status":"published","published":"2022-08-30T03:15:00Z","modified":"2026-10-17T12:55:59.205176278Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:55.502114Z"},{"id":"ALSA-2023:2259","title":"Moderate: poppler security and bug fix update","description":"Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.\n\nSecurity Fix(es):\n\n* poppler: integer overflow in JBIG2 decoder using malformed files (CVE-2022-38784)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-09T00:00:00Z","modified":"2026-10-29T11:30:53.402320927Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2023:2810","title":"Moderate: poppler security update","description":"Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.\n\nSecurity Fix(es):\n\n* poppler: integer overflow in JBIG2 decoder using malformed files (CVE-2022-38784)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2023-05-16T00:00:00Z","modified":"2026-10-29T11:02:04.906144415Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CLSA-2024-1721206996","title":"poppler: Fix of CVE-2022-38784","description":"- CVE-2022-38784: fix integer overflow in JBIG2 decoder","status":"published","published":"2024-07-17T09:03:19Z","modified":"2026-06-01T00:33:17.558245525Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"CVE-2022-38784","description":"Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.","status":"published","published":"2022-08-30T02:58:33.566Z","modified":"2026-10-28T02:30:24.52214131Z","updated_at":"2026-11-02T15:44:26.53798Z"},{"id":"DLA-3120-1","title":"poppler - security update","status":"published","published":"2022-09-26T00:00:00Z","modified":"2026-03-09T01:21:12.352272Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5224-1","title":"poppler - security update","status":"published","published":"2022-09-06T00:00:00Z","modified":"2026-03-09T02:10:11.755918Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2022-0386","title":"Updated poppler packages fix security vulnerability","description":"Poppler prior to and including 22.08.0 contains an integer overflow in the\nJBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc).\nProcessing a specially crafted PDF file or JBIG2 image could lead to a\ncrash or the execution of arbitrary code. This is similar to the\nvulnerability described by CVE-2022-38171 in Xpdf. (CVE-2022-38784)\n","status":"published","published":"2022-10-23T22:48:35Z","modified":"2026-04-16T04:43:17.277105161Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12362-1","title":"libpoppler-cpp0-22.09.0-1.1 on GA media","description":"These are all security issues fixed in the libpoppler-cpp0-22.09.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:22:00.977276Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"RLSA-2023:2810","title":"Moderate: poppler security update","description":"Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince.\n\nSecurity Fix(es):\n\n* poppler: integer overflow in JBIG2 decoder using malformed files (CVE-2022-38784)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.","status":"published","published":"2023-05-18T19:17:56.497129Z","modified":"2026-02-05T00:45:06.060734Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2023:0480-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n  - CVE-2022-38784: Fixed integer overflow in the JBIG2 decoder (bsc#1202692).\n  - CVE-2019-13283: Fixed heap-based buffer over-read that could be triggered by sending a crafted PDF document to the pdftotext tool (bsc#1140877).\n","status":"published","published":"2023-02-22T14:03:45Z","modified":"2026-02-04T02:49:21.466417Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0494-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n  - CVE-2022-38784: Fixed integer overflow in the JBIG2 decoder (bsc#1202692).\n  - CVE-2019-13283: Fixed heap-based buffer over-read that could be triggered by sending a crafted PDF document to the pdftotext tool (bsc#1140877).\n\n","status":"published","published":"2023-02-23T11:47:46Z","modified":"2026-02-04T02:27:59.17827Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0495-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n  - CVE-2022-38784: Fixed integer overflow in the JBIG2 decoder (bsc#1202692).\n","status":"published","published":"2023-02-23T11:48:40Z","modified":"2026-02-04T03:13:58.13212Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0677-1","title":"Security update for poppler","description":"This update for poppler fixes the following issues:\n\n  - CVE-2022-38784: Fixed integer overflow in the JBIG2 decoder (bsc#1202692).\n\n  Bugfixes:\n\n  - Fixed issue where some PDF generators generate PDF with some wrong numbers in entry table, but the content is still valid (bsc#1181551).\n\n","status":"published","published":"2023-03-08T14:00:50Z","modified":"2026-02-04T04:09:52.334474Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"USN-5606-1","title":"poppler vulnerability","description":"It was discovered that poppler incorrectly handled certain\nPDF. An attacker could possibly use this issue to cause a\ndenial of service or execute arbitrary code.\n","status":"published","published":"2022-09-12T18:25:00Z","modified":"2026-06-25T13:31:22.640626847Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}