{"id":"CVE-2022-38171","published":"2022-08-22T18:33:47Z","modified":"2024-09-16T18:34:06Z","title":"Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in…","vendor":null,"product":null,"tier":"tail","description":{"text":"Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by CVE-2021-30860 (Apple CoreGraphics).","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00341,"percentile":0.27474,"provenance":"source"},"cwes":[],"references":[{"url":"http://www.xpdfreader.com/security-fixes.html","tags":[]},{"url":"https://dl.xpdfreader.com/xpdf-4.04.tar.gz","tags":[]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30860","tags":[]},{"url":"https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html","tags":[]},{"url":"https://github.com/jeffssh/CVE-2021-30860","tags":[]},{"url":"http://www.openwall.com/lists/oss-security/2022/09/02/11","tags":["mailing-list"]},{"url":"https://github.com/zmanion/Vulnerabilities/blob/main/CVE-2022-38171.md","tags":[]}],"priority":{"score":5.5,"factors":[{"name":"EPSS percentile","points":5.49}]},"euvd":{"id":"EUVD-2022-40767","exploited":false,"provenance":"source"},"lineage":{"parents":[{"from":"CVE-2021-30860","to":"CVE-2022-38171","relation":"related","confidence":"low","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"This is similar to the vulnerability described by CVE-2021-30860 (Apple CoreGraphics).","from":"CVE.org","in":"CVE-2022-38171"}]}],"children":[{"from":"CVE-2022-38171","to":"CVE-2022-38784","relation":"related","confidence":"low","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"This is similar to the vulnerability described by CVE-2022-38171 in Xpdf.","from":"CVE.org","in":"CVE-2022-38784"}]}]}}