jbig2imagecompose in jbig2_image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "low", "binaries": [ { "jbig2dec-dbgsym": "0.12+20150918-1ubuntu0.1+esm2", "libjbig2dec0-dbgsym": "0.12+20150918-1ubuntu0.1+esm2", "libjbig2dec0-dev": "0.12+20150918-1ubuntu0.1+esm2", "jbig2dec": "0.12+20150918-1ubuntu0.1+esm2", "libjbig2dec0": "0.12+20150918-1ubuntu0.1+esm2" } ] }