OESA-2026-2995 jbig2dec security update

jbig2dec is a decoder implementation of the JBIG2 image compression format. Security Fixes: An integer overflow in the jbig2arithiaidctxnew function of Artifex commit cc37d0 allows attackers to cause a Denial of Service DoS via a crafted input.CVE-2026-38076...

CVE-2026-38076

A flaw was found in jbig2dec. An integer overflow vulnerability in the jbig2arithiaidctxnew function allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted input. This can lead to the affected system becoming unresponsive or crashing, disrupting its normal...

WS-2020-0367

jbig2dec in versions 0.12 to 0.18 is vulnerable to Use-of-uninitialized-value, related to jbig2text.c...

MiracleLinux 8 : jbig2dec-0.14-4.el8 (AXSA:2020-327:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-327:01 advisory. jbig2dec: heap-based buffer overflow in jbig2imagecompose in jbig2image.c CVE-2020-12268 Tenable has extracted the preceding description block directly from t...

TencentOS Server 4: jbig2dec (TSSA-2024:0167)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0167 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

EUVD-2017-18154

Malware in sbrugna...

EUVD-2020-4581

Malware in sbrugna...

EUVD-2017-16946

Malware in sbrugna...

EUVD-2017-16860

Malware in sbrugna...

EUVD-2017-5784

Malware in sbrugna...

EUVD-2023-50581

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-46361

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Artifex Software jbig2dec v0.20 was discovered to contain a SEGV vulnerability via jbig2error at /jbig2dec/jbig2.c. CVE-2023-46361 Note that Nessus relies on th...

jbig2dec:jbig2_fuzzer: Heap-use-after-free in jbig2_data_in

Detailed Report: https://oss-fuzz.com/testcase?key=5246757199216640 Project: jbig2dec Fuzzing Engine: libFuzzer Fuzz Target: jbig2fuzzer Job Type: libfuzzerasanjbig2dec Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x507000000730 Crash State: jbig2datain jbig2fuzzer.cc...

Linux Distros Unpatched Vulnerability : CVE-2020-12268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jbig2imagecompose in jbig2image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow. CVE-2020-12268 Note that Nessus relies on the presence of th...

Alibaba Cloud Linux 3 : 0036: jbig2dec (ALINUX3-SA-2022:0036)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2022:0036 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-12268: jbig2imagecompose in jbig2image.c i...

Linux Distros Unpatched Vulnerability : CVE-2017-7885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service application crash or disclosure of sensitive information from process memor...

Linux Distros Unpatched Vulnerability : CVE-2017-9216

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in the jbig2huffmanget function in jbig2huffman.c. For...

Linux Distros Unpatched Vulnerability : CVE-2017-7975

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes because of an integer overflow in the jbig2buildhuffmantable function in jbig2huffman...

Huawei EulerOS: Security Advisory for jbig2dec (EulerOS-SA-2024-2928)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for jbig2dec (EulerOS-SA-2024-2922)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...