Arbitrary Code Execution

jbig2dec is vulnerable to arbitrary code execution. The vulnerability exists through an out-of-bounds write, due to an integer overflow in the jbig2buildhuffmantable function in jbig2huffman.c...

CVE-2017-7975

CVE-2017-7975 affects Artifex jbig2dec 0.13 (used in Ghostscript). The root cause is an integer overflow in jbig2_build_huffman_table within jbig2_huffman.c, causing out-of-bounds writes when processing crafted JBIG2 files. Impact per the sources includes denial of service (application crash) and...