CVE-2018-11230

jbig2_add_page in jbig2enc.cc in libjbig2enc.a in jbig2enc 0.29 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted file.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2018-05-17

Last modified

2024-09-17

Weaknesses

CWE-416

Affected products

• Jbig2enc (Jbig2enc Project)

References

• https://github.com/agl/jbig2enc/issues/61