Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2_image_compose function in jbig2_image.c during operations on a crafted .jb2 file, leading to a denial of service (application crash) or disclosure of sensitive information from process memory.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Artifex jbig2dec 数字错误漏洞
Vulnerability Description
Artifex jbig2dec是一个用于Ghostscript和MuPDF中解码PDF文件中的JBIG2流的实现。 Artifex jbig2dec 0.13版本中的jbig2_image.c文件的‘jbig2_image_compose’函数存在整数溢出漏洞。攻击者可借助特制的.jb2文件利用该漏洞造成拒绝服务(越边界读取和写入),或泄露进程内存中的敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A