Medium severity6.5NVD Advisory· Published Sep 9, 2022· Updated Jun 17, 2026

CVE-2022-38266

Description

An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) via a crafted JPEG file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Leptonica/Leptonica2 versions
cpe:2.3:a:leptonica:leptonica:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:leptonica:leptonica:*:*:*:*:*:*:*:*range: <1.80.0
- (no CPE)range: =1.79.0
Tesseract Project/Tesseract
cpe:2.3:a:tesseract_project:tesseract:5.0.0:alpha-20210401:*:*:*:*:*:*
Debian/linux
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Leptonica/Leptonicadescription

Patches

Vulnerability mechanics

References

github.com/DanBloomberg/leptonica/commit/f062b42c0ea8dddebdc6a152fd16152de215d614nvdPatchThird Party Advisory
github.com/tesseract-ocr/tesseract/issues/3498nvdExploitIssue TrackingThird Party Advisory
lists.debian.org/debian-lts-announce/2022/12/msg00018.htmlnvdMailing ListThird Party Advisory
security.gentoo.org/glsa/202312-01nvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000