PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2017-9216

CVE-2017-9216

jbig2dec: Null pointer dereference in jbig2_huffman_get()

Loading…

Severity

Low

Red Hat Product Security

3.3

CVSS 3.0

Review impact separately from score.

Published · May 23, 2017

Updated · November 22, 2025

Description

libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in the jbig2_huffman_get function in jbig2_huffman.c. For example, the jbig2dec utility will crash (segmentation fault) when parsing an invalid file.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 3.3
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-391 · Unchecked Error Condition