jbig2imagecompose in jbig2_image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "low", "binaries": [ { "binary_version": "0.12+20150918-1ubuntu0.1+esm2", "binary_name": "jbig2dec" }, { "binary_version": "0.12+20150918-1ubuntu0.1+esm2", "binary_name": "jbig2dec-dbgsym" }, { "binary_version": "0.12+20150918-1ubuntu0.1+esm2", "binary_name": "libjbig2dec0" }, { "binary_version": "0.12+20150918-1ubuntu0.1+esm2", "binary_name": "libjbig2dec0-dbgsym" }, { "binary_version": "0.12+20150918-1ubuntu0.1+esm2", "binary_name": "libjbig2dec0-dev" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "0.18-1ubuntu1", "binary_name": "jbig2dec" }, { "binary_version": "0.18-1ubuntu1", "binary_name": "jbig2dec-dbgsym" }, { "binary_version": "0.18-1ubuntu1", "binary_name": "libjbig2dec0" }, { "binary_version": "0.18-1ubuntu1", "binary_name": "libjbig2dec0-dbgsym" }, { "binary_version": "0.18-1ubuntu1", "binary_name": "libjbig2dec0-dev" } ] }