jbig2_image_compose in jbig2_image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow.
References
Link | Resource |
---|---|
https://github.com/ArtifexSoftware/jbig2dec/compare/0.17...0.18 | Third Party Advisory |
https://github.com/ArtifexSoftware/jbig2dec/commit/0726320a4b55078e9d8deb590e477d598b3da66e | Patch Third Party Advisory |
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20332 | Exploit Third Party Advisory |
http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00034.html | Mailing List Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2021/10/msg00023.html | Mailing List Third Party Advisory |
Information
Published : 2020-04-26 19:15
Updated : 2021-11-02 07:25
NVD link : CVE-2020-12268
Mitre link : CVE-2020-12268
JSON object : View
CWE
CWE-787
Out-of-bounds Write
Products Affected
debian
- debian_linux
artifex
- jbig2dec
opensuse
- leap