libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in the jbig2huffmanget function in jbig2_huffman.c. For example, the jbig2dec utility will crash (segmentation fault) when parsing an invalid file.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "low", "binaries": [ { "binary_version": "0.12+20150918-1ubuntu0.1+esm2", "binary_name": "jbig2dec" }, { "binary_version": "0.12+20150918-1ubuntu0.1+esm2", "binary_name": "jbig2dec-dbgsym" }, { "binary_version": "0.12+20150918-1ubuntu0.1+esm2", "binary_name": "libjbig2dec0" }, { "binary_version": "0.12+20150918-1ubuntu0.1+esm2", "binary_name": "libjbig2dec0-dbgsym" }, { "binary_version": "0.12+20150918-1ubuntu0.1+esm2", "binary_name": "libjbig2dec0-dev" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "0.13-6", "binary_name": "jbig2dec" }, { "binary_version": "0.13-6", "binary_name": "jbig2dec-dbgsym" }, { "binary_version": "0.13-6", "binary_name": "libjbig2dec0" }, { "binary_version": "0.13-6", "binary_name": "libjbig2dec0-dbgsym" }, { "binary_version": "0.13-6", "binary_name": "libjbig2dec0-dev" } ] }