CVE-2022-38266: Debian Linux

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) via a crafted JPEG file.

Affected products

• Debian Debian Linux: version 10.0 only
• Leptonica Leptonica: before 1.80.0 (fixed in 1.80.0)
• Tesseract-Ocr Tesseract Ocr: version 5.0.0 only

Published 2022-09-09. Last modified 2026-09-14.