CVE-2017-7976

CVE-2017-7976 describes an integer overflow vulnerability in Artifex jbig2dec 0.13, specifically within the jbig2_image_compose function when processing crafted .jb2 files. This flaw allows for out-of-bounds writes and reads, potentially leading to a denial of service (application crash) or sensitive information disclosure from process memory. With a CVSS score of 7.1 (High), exploitation requires local access and user interaction, but has a high impact on confidentiality and availability. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.