| Bug | bullseye | bookworm | trixie | forky | sid | Description |
|---|
| TEMP-1139009-9CE18E | vulnerable (no DSA, postponed) | fixed | fixed | fixed | fixed | integer overflow in fax image allocation leads to undersized heap allocation |
| TEMP-1139008-F7B58F | vulnerable (no DSA, postponed) | fixed | fixed | fixed | fixed | unsigned integer wrap-around in fax backend leads to heap out-of-bounds read and write |
| TEMP-1139007-21322A | vulnerable (no DSA, postponed) | fixed | fixed | fixed | fixed | heap out-of-bounds read in fax backend Ghostscript header handling |
| TEMP-1139005-4885B2 | vulnerable (no DSA, postponed) | fixed | fixed | fixed | fixed | heap out-of-bounds read in fax backend FAXMAGIC comparison |
| TEMP-1139004-33118B | vulnerable (no DSA, postponed) | fixed | fixed | fixed | fixed | heap out-of-bounds write in fax backend on zero-length input |