CVE-2022-38266

MEDIUM

Leptonica v1.79.0 - DoS

Title source: llm

Description

An issue in the Leptonica linked library (v1.79.0) allows attackers to cause an arithmetic exception leading to a Denial of Service (DoS) via a crafted JPEG file.

Scores

CVSS v3 6.5
EPSS 0.0031
EPSS Percentile 53.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Classification

CWE
CWE-369
Status published

Affected Products (3)

tesseract_project/tesseract
leptonica/leptonica < 1.80.0
debian/debian_linux

Timeline

Published Sep 09, 2022
Tracked Since Feb 18, 2026