Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9rxh-wvvf-hh9j

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2_decode_symbol_dict function in jbig2_symbol_dict.c in libjbig2dec.a during operation on a crafted .jb2 file.

Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2_decode_symbol_dict function in jbig2_symbol_dict.c in libjbig2dec.a during operation on a crafted .jb2 file.

EPSS

Процентиль: 52%
0.00287
Низкий

7.1 High

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 7.1
ubuntu
почти 9 лет назад

Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2_decode_symbol_dict function in jbig2_symbol_dict.c in libjbig2dec.a during operation on a crafted .jb2 file.

CVSS3: 4.4
redhat
почти 9 лет назад

Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2_decode_symbol_dict function in jbig2_symbol_dict.c in libjbig2dec.a during operation on a crafted .jb2 file.

CVSS3: 7.1
nvd
почти 9 лет назад

Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2_decode_symbol_dict function in jbig2_symbol_dict.c in libjbig2dec.a during operation on a crafted .jb2 file.

CVSS3: 7.1
debian
почти 9 лет назад

Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to den ...

EPSS

Процентиль: 52%
0.00287
Низкий

7.1 High

CVSS3

Дефекты

CWE-190