{"schemaVersion":3,"id":"MGASA-2022-0320","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated xpdf packages fix security vulnerability\n\nIn Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the\n'interleaved' flag to be changed after the first scan of the image,\nleading to an unknown integer-related vulnerability in Stream.cc.\n(CVE-2022-24106)\n\nXpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc.\n(CVE-2022-24107)\n\nXpdf prior to version 4.04 contains an integer overflow in the JBIG2\ndecoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a\nspecially crafted PDF file or JBIG2 image could lead to a crash or the\nexecution of arbitrary code. (CVE-2022-38171)","dates":{"published":"2022-09-07T05:27:53.000Z","modified":"2026-04-16T04:41:47.162Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"xpdf","name":"xpdf","label":"xpdf","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/xpdf","purlType":"rpm","versions":[{"text":"< 4.04-1.mga8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.04-1.mga8","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2022-0320.html","label":"advisories.mageia.org/MGASA-2022-0320.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30804","label":"bugs.mageia.org/show_bug.cgi?id=30804","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"http://www.xpdfreader.com/security-fixes.html","label":"www.xpdfreader.com/security-fixes.html","hostname":"www.xpdfreader.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2022-24106","CVE-2022-24107","CVE-2022-38171"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2022-09-07T05:27:53.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-16T04:41:47.162Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T12:54:58.639Z","stale":false,"partial":false}}