CVE Feed

    Dashboard / CVE / CVE-2020-12268

    CVE-2020-12268

    jbig2_image_compose in jbig2_image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow.

    Published:Jan 27, 2020
    Last Modified:Nov 21, 2024
    EPS:Apr 27, 2020
    EPSS Score:0.00813
    CVSS Score:9.8

    Affected Products

    Vendor
    Artifex
    Product
    Jbig2dec
    Vendor
    Debian
    Product
    Debian Linux
    Vendor
    Opensuse
    Product
    Leap
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Rhel E4s
    Vendor
    Redhat
    Product
    Rhel Eus

    Exploits

    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20332https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20332

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-92 Forced Integer Overflow

    Related CVEs

    CVE-2026-38076 (CVSS 7.5) — An integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attackers to ca…
    CVE-2023-46361 (CVSS 6.5) — Artifex Software jbig2dec v0.20 was discovered to contain a SEGV vulnerability via jbig2_error at /jbig2dec/jb…
    CVE-2017-9216 (CVSS 6.5) — libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in th…
    CVE-2017-7885 (CVSS 7.1) — Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or di…
    CVE-2017-7975 (CVSS 7.8) — Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes because of an integer overflow in t…
    CVE-2017-7976 (CVSS 7.1) — Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2_image_…
    CVE-2016-9601 (CVSS 5.3) — ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscrip…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High