Overflowing the DjVuLibre MMR decoder with zero-length runs
A fax-coding decoder writes one run-length entry per code and never checks it is still inside the buffer.
found by Antonio Morales, GitHub Security Lab
A fax-coding decoder writes one run-length entry per code and never checks it is still inside the buffer.
found by Antonio Morales, GitHub Security Lab