Amazon Linux 2023 : jbig2dec, jbig2dec-devel, jbig2dec-libs (ALAS2023-2026-2027)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2027 advisory. An integer overflow in the jbig2arithiaidctxnew function of Artifex commit cc37d0 allows attackers to cause a Denial of Service DoS via a crafted input. CVE-2026-38076 Tenable has extracted the precedi...