p PatchFirst

CVE-2022-24106

CVE-2022-24106

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the image, leading to an unknown integer-related vulnerability in Stream.cc.

CVSS 7.8 · High · EPSS 0.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • poppler Debian:12

    Versions
    • 22.12.0-2
    • 22.12.0-2+deb12u1
    • 22.12.0-2+deb12u2
    • 22.12.0-2+deb12u3
    • 22.12.0-2.1
    • 22.12.0-2.2
    • 23.08.0-1
    • 23.08.0-2
    • 23.12.0-1
    • 24.02.0-1
    • 24.02.0-2
    • 24.02.0-3
    • 24.02.0-4
    • 24.02.0-5
    • 24.02.0-5+loong64
    • 24.06.0-1
    • 24.06.0-2
    • 24.08.0-1
    • 24.08.0-2
    • 24.08.0-3
    • 24.08.0-4
    • 25.01.0-1
    • 25.01.0-2
    • 25.01.0-3
    • 25.01.0-4
    • 25.01.0-5
    • 25.03.0-1
    • 25.03.0-10
    • 25.03.0-11
    • 25.03.0-11.1
    • 25.03.0-2
    • 25.03.0-3
    • 25.03.0-4
    • 25.03.0-5
    • 25.03.0-6
    • 25.03.0-7
    • 25.03.0-9
    • 26.01.0-1
    • 26.01.0-2
    • 26.01.0-3
    • 26.01.0-4
    • 26.01.0-4.1
    • 26.01.0-5
    • 26.07.0-1
    • 26.07.0-2
    • 26.07.0-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • poppler Debian:13

    Versions
    • 25.03.0-10
    • 25.03.0-11
    • 25.03.0-11.1
    • 25.03.0-5
    • 25.03.0-5+deb13u2
    • 25.03.0-5+deb13u3
    • 25.03.0-5+deb13u4
    • 25.03.0-6
    • 25.03.0-7
    • 25.03.0-9
    • 26.01.0-1
    • 26.01.0-2
    • 26.01.0-3
    • 26.01.0-4
    • 26.01.0-4.1
    • 26.01.0-5
    • 26.07.0-1
    • 26.07.0-2
    • 26.07.0-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • poppler Debian:14

    Versions
    • 25.03.0-10
    • 25.03.0-11
    • 25.03.0-11.1
    • 25.03.0-5
    • 25.03.0-6
    • 25.03.0-7
    • 25.03.0-9
    • 26.01.0-1
    • 26.01.0-2
    • 26.01.0-3
    • 26.01.0-4
    • 26.01.0-4.1
    • 26.01.0-5
    • 26.07.0-1
    • 26.07.0-2
    • 26.07.0-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • emscripten Ubuntu:16.04:LTS

    Versions
    • 1.22.1-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:16.04:LTS

    Versions
    • 7.1.4-2.1
    • 7.1.8-1
    • 7.1.10-1
    • 7.1.10-1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xpdf Ubuntu:16.04:LTS

    Versions
    • 3.03-17ubuntu2
    • 3.03-17ubuntu3
    • 3.03-17ubuntu5
    • 3.03-18
    • 3.04-1
    • 3.04-1build1
    • 3.04-1ubuntu1
    • 3.04-1ubuntu1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • emscripten Ubuntu:18.04:LTS

    Versions
    • 1.22.1-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:18.04:LTS

    Versions
    • 7.2.7-2
    • 7.2.7-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • texlive-bin Ubuntu:Pro:20.04:LTS

    Versions
    • 2019.20190605.51237-2build1
    • 2019.20190605.51237-3
    • 2019.20190605.51237-3build1
    • 2019.20190605.51237-3build2
    • 2019.20190605.51237-3ubuntu0.1
    • 2019.20190605.51237-3ubuntu0.2
    Affected ranges
    • ECOSYSTEM: < 2019.20190605.51237-3ubuntu0.2+esm1

    Update to 2019.20190605.51237-3ubuntu0.2+esm1

  • ipe Ubuntu:20.04:LTS

    Versions
    • 7.2.9-1
    • 7.2.13-2
    • 7.2.13-2build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • emscripten Ubuntu:22.04:LTS

    Versions
    • 2.0.13~dfsg-1
    • 3.1.1~dfsg+~1.39.6-5ubuntu4
    • 3.1.2~dfsg+~1.39.6-6ubuntu1
    • 3.1.3~dfsg-4ubuntu1
    • 3.1.3~dfsg-5ubuntu1
    • 3.1.4~dfsg-7ubuntu1
    • 3.1.5~dfsg-3ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:22.04:LTS

    Versions
    • 7.2.23+dfsg1-2
    • 7.2.24+dfsg1-1
    • 7.2.24+dfsg1-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • texlive-bin Ubuntu:22.04:LTS

    Versions
    • 2020.20200327.54578-7
    • 2020.20200327.54578-7build1
    • 2021.20210626.59705-1
    • 2021.20210626.59705-1build1
    • 2021.20210626.59705-1ubuntu0.1
    • 2021.20210626.59705-1ubuntu0.2
    Affected ranges
    • ECOSYSTEM: < 2021.20210626.59705-1ubuntu0.3

    Update to 2021.20210626.59705-1ubuntu0.3

  • emscripten Ubuntu:24.04:LTS

    Versions
    • 3.1.6~dfsg-5
    • 3.1.6~dfsg-6
    • 3.1.6~dfsg-7
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:24.04:LTS

    Versions
    • 7.2.27+dfsg1-2
    • 7.2.28-2
    • 7.2.28-2.1build2
    • 7.2.28-2.1build3
    • 7.2.28-2.1build4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • emscripten Ubuntu:25.10

    Versions
    • 3.1.69+dfsg-1
    • 3.1.69+dfsg-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:25.10

    Versions
    • 7.2.30-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • emscripten Ubuntu:26.10

    Versions
    • 3.1.69+dfsg-4
    • 6.0.5+dfsg+~1.41.5-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:26.10

    Versions
    • 7.2.30-1build2
    • 7.2.30-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • emscripten Ubuntu:26.04:LTS

    Versions
    • 3.1.69+dfsg-3
    • 3.1.69+dfsg-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:26.04:LTS

    Versions
    • 7.2.30-1build1
    • 7.2.30-1build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →