PT-2022-16467

CVE-2022-24106

·

Published

2022-05-15

·

Updated

2026-10-31

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Xpdf versions prior to 4.04
Description The issue is related to the DCT (JPEG) decoder in Xpdf, which incorrectly allows the interleaved flag to be changed after the first scan of the image. This leads to an unknown integer-related issue in Stream.cc.
Recommendations For versions prior to 4.04, update to version 4.04 or later to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2022-1867
ALT-PU-2022-2449
CLEANSTART-2024-JV89121
ECHO-9BF0-CD5C-D541
MGASA-2022-0320
USN-7985-1
Found an issue in the description? Have something to add? Feel free to write us 👾