tocsin

Debian/jbig2dec: high 7.8

An exploitable memory corruption vulnerability exists in the JBIG2 parser of Artifex MuPDF 1.9. A specially crafted PDF can cause a negative number to be passed to a memset resulting in memory corrupt

Action: Upgrade jbig2dec to 0.13-4 or later.

Affected

introducedfixedlast affected
00.13-4-

Fixed versions

0.13-4

Sources

published · modified · JSON