CVE-2022-38266
published 2022-09-09CVE-2022-38266: An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) via a crafted JPEG…
PriorityP424medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
EPSS
1.45%
73.1th percentile
An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) via a crafted JPEG file.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | leptonlib | < leptonlib 1.82.0-1 (bookworm) | leptonlib 1.82.0-1 (bookworm) |
| leptonica | leptonica | < 1.80.0 | 1.80.0 |
| tesseract-ocr | tesseract_ocr | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv6.5MEDIUM
vendor_debian6.5MEDIUM
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
leptonica: arithmetic exception leads to denial of service
vendor_redhat·2022-09-12·CVSS 6.5
CVE-2022-38266 [MEDIUM] CWE-400 leptonica: arithmetic exception leads to denial of service
leptonica: arithmetic exception leads to denial of service
An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) via a crafted JPEG file.
A vulnerability was found in the Leptonica linked library in Tesseract. A divide by zero in the pixBlockconvGray function causes an arithmetic exception, leading to a denial of service.
Package: leptonica (Red Hat Enterprise Linux 8) - Fix deferred
Package: leptonica (Red Hat Enterprise Linux 9) - Fix deferred
Debian
CVE-2022-38266: leptonlib - An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an ...
vendor_debian·2022·CVSS 6.5
CVE-2022-38266 [MEDIUM] CVE-2022-38266: leptonlib - An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an ...
An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) via a crafted JPEG file.
Scope: local
bookworm: resolved (fixed in 1.82.0-1)
bullseye: resolved (fixed in 1.79.0-1.1+deb11u1)
forky: resolved (fixed in 1.82.0-1)
sid: resolved (fixed in 1.82.0-1)
trixie: resolved (fixed in 1.82.0-1)
VulDB
Leptonica 1.79.0 JPEG File denial of service (Issue 3498)
vuldb·2026-09-14·CVSS 6.5
CVE-2022-38266 [MEDIUM] Leptonica 1.79.0 JPEG File denial of service (Issue 3498)
A vulnerability described as problematic has been identified in Leptonica 1.79.0. Affected is an unknown function of the component JPEG File Handler. Such manipulation leads to denial of service.
This vulnerability is uniquely identified as CVE-2022-38266. The attack can only be initiated within the local network. No exploit exists.
GHSA
GHSA-xgw2-h7jv-85pm: An issue in the Leptonica linked library (v1
ghsa_unreviewed·2022-09-10
CVE-2022-38266 [MEDIUM] CWE-369 GHSA-xgw2-h7jv-85pm: An issue in the Leptonica linked library (v1
An issue in the Leptonica linked library (v1.79.0) in Tesseract v5.0.0 allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) via a crafted JPEG file.
OSV
CVE-2022-38266: An issue in the Leptonica linked library (v1
osv·2022-09-09·CVSS 6.5
CVE-2022-38266 [MEDIUM] CVE-2022-38266: An issue in the Leptonica linked library (v1
An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) via a crafted JPEG file.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/DanBloomberg/leptonica/commit/f062b42c0ea8dddebdc6a152fd16152de215d614https://github.com/tesseract-ocr/tesseract/issues/3498https://lists.debian.org/debian-lts-announce/2022/12/msg00018.htmlhttps://security.gentoo.org/glsa/202312-01https://github.com/DanBloomberg/leptonica/commit/f062b42c0ea8dddebdc6a152fd16152de215d614https://github.com/tesseract-ocr/tesseract/issues/3498https://lists.debian.org/debian-lts-announce/2022/12/msg00018.htmlhttps://security.gentoo.org/glsa/202312-01
2022-09-09
Published