Описание
Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2_decode_symbol_dict function in jbig2_symbol_dict.c in libjbig2dec.a during operation on a crafted .jb2 file.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 0.13-4.1 |
| bionic | not-affected | 0.13-4.1 |
| cosmic | not-affected | 0.13-4.1 |
| devel | not-affected | 0.13-4.1 |
| disco | not-affected | 0.13-4.1 |
| eoan | not-affected | 0.13-4.1 |
| esm-infra-legacy/trusty | released | 0.11+20120125-1ubuntu1.1 |
| esm-infra/bionic | not-affected | 0.13-4.1 |
| esm-infra/focal | not-affected | 0.13-4.1 |
| esm-infra/xenial | released | 0.12+20150918-1ubuntu0.1 |
Показывать по
EPSS
5.8 Medium
CVSS2
7.1 High
CVSS3
Связанные уязвимости
Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2_decode_symbol_dict function in jbig2_symbol_dict.c in libjbig2dec.a during operation on a crafted .jb2 file.
Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2_decode_symbol_dict function in jbig2_symbol_dict.c in libjbig2dec.a during operation on a crafted .jb2 file.
Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to den ...
Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2_decode_symbol_dict function in jbig2_symbol_dict.c in libjbig2dec.a during operation on a crafted .jb2 file.
EPSS
5.8 Medium
CVSS2
7.1 High
CVSS3