CVE-2017-9216

libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in the jbig2_huffman_get function in jbig2_huffman.c

published May 24, 2017

CVSS
—
EPSS
3%
Percentile
88.9
In the wild
Unconfirmed
What it is

libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in the jbig2_huffman_get function in jbig2_huffman.c. For example, the jbig2dec utility will crash (segmentation fault) when parsing an invalid file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03452 · 88.9th percentile
Published
2017-05-24T04:56Z
EPSS history
Timeline
  • 24 MAY 04:56Z
    libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in the jbig2_huffman_get function in jbig2_huffman.c
    cvelistv5