libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in the jbig2huffmanget function in jbig2_huffman.c. For example, the jbig2dec utility will crash (segmentation fault) when parsing an invalid file.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "low", "binaries": [ { "jbig2dec-dbgsym": "0.12+20150918-1ubuntu0.1+esm2", "libjbig2dec0-dbgsym": "0.12+20150918-1ubuntu0.1+esm2", "libjbig2dec0-dev": "0.12+20150918-1ubuntu0.1+esm2", "jbig2dec": "0.12+20150918-1ubuntu0.1+esm2", "libjbig2dec0": "0.12+20150918-1ubuntu0.1+esm2" } ] }