CVE-2016-9601

Name of the Vulnerable Software and Affected Versions ghostscript versions prior to 9.21

Description The issue is related to a heap-based buffer overflow found in the jbig2 decode gray scale image function, which is used for decoding halftone segments in JBIG2 images. A document, such as PostScript or PDF, containing a specially crafted JBIG2 image could trigger a segmentation fault in ghostscript.

Recommendations For versions prior to 9.21, update to version 9.21 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the jbig2 decode gray scale image function until a patch is available. Restrict access to documents with embedded JBIG2 images to minimize the risk of exploitation.