In GNU Libextractor 1.4, there is a NULL Pointer Dereference in the EXTRACTORnsfextractmethod function of plugins/nsfextractor.c.
{ "availability": "No subscription required", "binaries": [ { "binary_version": "1:1.3-4+deb9u3build0.16.04.1", "binary_name": "extract" }, { "binary_version": "1:1.3-4+deb9u3build0.16.04.1", "binary_name": "libextractor-dev" }, { "binary_version": "1:1.3-4+deb9u3build0.16.04.1", "binary_name": "libextractor3" } ] }