CVE-2016-9601
ghostscript: Heap-buffer overflow due to Integer overflow in jbig2_image_new function
Severity
LowRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · December 28, 2016
Updated · June 30, 2026
Description
A heap based buffer overflow was found in the ghostscript jbig2_decode_gray_scale_image() function used to decode halftone segments in a JBIG2 image. A document (PostScript or PDF) with an embedded, specially crafted, jbig2 image could trigger a segmentation fault in ghostscript.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.0 · 5.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-190 · Integer Overflow or Wraparound