VULNERABILITY INTELLIGENCE

CVE-2022-24106

CVSS score7.8 HIGH
EPSS probability0.31%
CISA KEVNot currently listed
Published2022-08-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

In Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the image, leading to an unknown integer-related vulnerability in Stream.cc.

Weakness classification

  • nvd@nist.gov: CWE-190

Primary references