CVE-2022-24107: Glyphandcog Xpdfreader

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc.

Affected products

• Glyphandcog Xpdfreader: before 4.04 (fixed in 4.04)

Published 2022-08-30. Last modified 2026-06-17.