| Package | Affected versions | Patched versions |
|---|---|---|
| jbig2dec | = 0.13 |
Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive information from process memory, because of an integer overflow in the jbig2_decode_symbol_dict function in jbig2_symbol_dict.c in libjbig2dec.a during operation on a crafted .jb2 file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free