ZeroHour

CVE-2017-9216

PoC
CVSS 3.1
6.5 medium
EPSS
3%p88
Published
()
Modified
Description

libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in the jbig2_huffman_get function in jbig2_huffman.c. For example, the jbig2dec utility will crash (segmentation fault) when parsing an invalid file.

Vendors
artifexdebian
Products
jbig2dec, debian linux
Weakness
CWE-476
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.