p PatchFirst

CVE-2022-38171

CVE-2022-38171

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2021-30860 (Apple CoreGraphics).

CVSS 7.8 · High · EPSS 0.3%

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • texlive-bin Ubuntu:Pro:16.04:LTS

    Versions
    • 2015.20150524.37493-5build1
    • 2015.20150524.37493-7
    • 2015.20150524.37493-7build1
    • 2015.20150524.37493-7build4
    • 2015.20160222.37495-1
    • 2015.20160222.37495-1ubuntu0.1
    • 2015.20160222.37495-1ubuntu0.1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:16.04:LTS

    Versions
    • 7.1.4-2.1
    • 7.1.8-1
    • 7.1.10-1
    • 7.1.10-1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xpdf Ubuntu:16.04:LTS

    Versions
    • 3.03-17ubuntu2
    • 3.03-17ubuntu3
    • 3.03-17ubuntu5
    • 3.03-18
    • 3.04-1
    • 3.04-1build1
    • 3.04-1ubuntu1
    • 3.04-1ubuntu1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • texlive-bin Ubuntu:Pro:18.04:LTS

    Versions
    • 2017.20170613.44572-5build1
    • 2017.20170613.44572-5build2
    • 2017.20170613.44572-6
    • 2017.20170613.44572-6build1
    • 2017.20170613.44572-6ubuntu1
    • 2017.20170613.44572-8build1
    • 2017.20170613.44572-8ubuntu0.1
    • 2017.20170613.44572-8ubuntu0.2
    • 2017.20170613.44572-8ubuntu0.2+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:18.04:LTS

    Versions
    • 7.2.7-2
    • 7.2.7-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • xpdf Ubuntu:18.04:LTS

    Versions
    • 3.04-4build1
    • 3.04-5
    • 3.04-5ubuntu2
    • 3.04-6ubuntu1
    • 3.04-7
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • texlive-bin Ubuntu:Pro:20.04:LTS

    Versions
    • 2019.20190605.51237-2build1
    • 2019.20190605.51237-3
    • 2019.20190605.51237-3build1
    • 2019.20190605.51237-3build2
    • 2019.20190605.51237-3ubuntu0.1
    • 2019.20190605.51237-3ubuntu0.2
    • 2019.20190605.51237-3ubuntu0.2+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:20.04:LTS

    Versions
    • 7.2.9-1
    • 7.2.13-2
    • 7.2.13-2build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:22.04:LTS

    Versions
    • 7.2.23+dfsg1-2
    • 7.2.24+dfsg1-1
    • 7.2.24+dfsg1-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • texlive-bin Ubuntu:22.04:LTS

    Versions
    • 2020.20200327.54578-7
    • 2020.20200327.54578-7build1
    • 2021.20210626.59705-1
    • 2021.20210626.59705-1build1
    • 2021.20210626.59705-1ubuntu0.1
    • 2021.20210626.59705-1ubuntu0.2
    • 2021.20210626.59705-1ubuntu0.3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:24.04:LTS

    Versions
    • 7.2.27+dfsg1-2
    • 7.2.28-2
    • 7.2.28-2.1build2
    • 7.2.28-2.1build3
    • 7.2.28-2.1build4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • texlive-bin Ubuntu:24.04:LTS

    Versions
    • 2023.20230311.66589-6
    • 2023.20230311.66589-7
    • 2023.20230311.66589-8
    • 2023.20230311.66589-8build1
    • 2023.20230311.66589-9
    • 2023.20230311.66589-9build2
    • 2023.20230311.66589-9build3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:25.10

    Versions
    • 7.2.30-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • texlive-bin Ubuntu:25.10

    Versions
    • 2024.20240313.70630+ds-6
    • 2024.20240313.70630+ds-6ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:26.10

    Versions
    • 7.2.30-1build2
    • 7.2.30-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • texlive-bin Ubuntu:26.10

    Versions
    • 2025.20250727.75242+ds-5build1
    • 2026.20260303.78225+ds-4
    • 2026.20260303.78225+ds-5ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ipe Ubuntu:26.04:LTS

    Versions
    • 7.2.30-1build1
    • 7.2.30-1build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • texlive-bin Ubuntu:26.04:LTS

    Versions
    • 2024.20240313.70630+ds-6ubuntu2
    • 2025.20250727.75242+ds-4ubuntu2
    • 2025.20250727.75242+ds-5
    • 2025.20250727.75242+ds-5build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →