In GNU Libextractor 1.4, there is a NULL Pointer Dereference in the EXTRACTORnsfextractmethod function of plugins/nsfextractor.c.
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "1:1.3-4+deb9u3build0.16.04.1",
"binary_name": "extract"
},
{
"binary_version": "1:1.3-4+deb9u3build0.16.04.1",
"binary_name": "libextractor-dev"
},
{
"binary_version": "1:1.3-4+deb9u3build0.16.04.1",
"binary_name": "libextractor3"
}
]
}