CVE-2022-24106: Glyphandcog Xpdfreader

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the image, leading to an unknown integer-related vulnerability in Stream.cc.

Affected products

• Glyphandcog Xpdfreader: before 4.04 (fixed in 4.04)

Published 2022-08-30. Last modified 2026-06-17.