from 0, < 1.9a+ds1-1.2
from 0, < 0.9-2+deb7u3
HIGH7.8CVE-2026-3308An integer overflow vulnerability in 'pdf-image.c' in Artifex's MuPDF version 1.27.0 allows an attacker to maliciously craft a PDF that can… from 0, < 1.17.0+ds1-2+deb11u2
HIGH7.8A Use After Free vulnerability exists in Artifex Software, Inc.
from 0, < 1.17.0+ds1-1
HIGH7.8SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file.
from 0, < 1.2-2
HIGH7.8mupdf - security update
from 0, < 1.15.0+ds1-1
HIGH7.8mupdf - security update
from 0, < 1.14.0+ds1-4+deb10u1
HIGH7.8In Artifex MuPDF 1.12.0 and earlier, multiple heap use after free bugs in the PDF parser could allow an attacker to execute arbitrary code,…
from 0, < 1.13.0+ds1-1
HIGH7.8In Artifex MuPDF 1.12.0 and earlier, a stack buffer overflow in function pdf_lookup_cmap_full in pdf/pdf-cmap.c could allow an attacker to…
from 0, < 1.13.0+ds1-1
HIGH7.8mupdf - security update
from 0, < 1.12.0+ds1-1
HIGH7.8mupdf - security update
from 0, < 1.5-1+deb8u4
HIGH7.8mupdf - security update
from 0, < 1.12.0+ds1-1
HIGH7.8mupdf - security update
from 0, < 1.9a+ds1-4+deb9u4
HIGH7.8mupdf - security update
from 0, < 1.11+ds1-2
HIGH7.8mupdf - security update
from 0, < 1.5-1+deb8u3
HIGH7.8mupdf - security update
from 0, < 1.11+ds1-1.1
HIGH7.8mupdf - security update
from 0, < 0.9-2+deb7u4
HIGH7.8Artifex MuPDF 1.11 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode…
from 0, < 1.11+ds1-1.1
HIGH7.8mupdf - security update
from 0, < 1.11+ds1-1.1
HIGH7.8mupdf - security update
from 0, < 1.9a+ds1-4+deb9u1
HIGH7.8Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap.c in Artifex MuPDF 1.10a allows remote attackers to cause a…
from 0, < 1.9a+ds1-3
HIGH7.8Stack-based buffer overflow in jstest_main.c in mujstest in Artifex Software, Inc.
from 0, < 1.12.0+ds1-1
HIGH7.5MuPDF versions 1.23.0 through 1.27.0 contain a double-free vulnerability in fz_fill_pixmap_from_display_list() when an exception occurs dur…
from 0
HIGH7.5A null pointer dereference occurs in the function break_word_for_overflow_wrap() in MuPDF 1.26.4 when rendering a malformed EPUB document.
from 0
HIGH7.5A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in functon compute_color() of jquant2.c.
from 0
HIGH7.5A floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in function pnm_binary_read_image() of load-pnm.c…
from 0
HIGH7.5A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function bmp_decompress_rle4() of load-…
from 0
HIGH7.5A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function pnm_binary_read_image() of loa…
from 0
HIGH7.5A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in the function fz_new_pixmap_from_float_d…
from 0
HIGH7.5An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465.
from 0, < 1.9a+ds1-4
MEDIUM6.5An issue in Artifex mupdf 1.25.6, 1.25.5 allows a remote attacker to cause a denial of service via an infinite recursion in the `mutool cle…
from 0
MEDIUM6.1A vulnerability was determined in Artifex MuPDF up to 1.28.0.
from 0
MEDIUM5.5Artifex Software mupdf v1.24.9 was discovered to contain a segmentation fault via the component /tools/pdfextract.c.
from 0
MEDIUM5.5MuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdf_mark_list_push.
from 0
MEDIUM5.5A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information.
from 0
MEDIUM5.5mupdf - security update
from 0, < 1.17.0+ds1-2+deb11u1
MEDIUM5.5mupdf - security update
from 0, < 1.17.0+ds1-2+deb11u1
MEDIUM5.5A Floating point exception (division-by-zero) flaw was found in Mupdf for zero width pages in muraster.c.
from 0
MEDIUM5.5MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not properly consider the maximum key size of a has…
from 0, < 1.17.0+ds1-2
MEDIUM5.5Artifex MuPDF before 1.18.0 has a heap based buffer over-write in tiff_expand_colormap() function when parsing TIFF files allowing attacker…
from 0, < 1.17.0+ds1-2
MEDIUM5.5A flaw was found in mupdf 1.18.0.
from 0, < 1.17.0+ds1-1.3
MEDIUM5.5mupdf - security update
from 0, < 1.17.0+ds1-1.1
MEDIUM5.5mupdf - security update
from 0, < 1.9a+ds1-4+deb9u6
MEDIUM5.5mupdf - security update
from 0, < 1.14.0+ds1-4+deb10u2
MEDIUM5.5svg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack consumption in svg_run_use_symbol, svg_run_element, and svg_run_use, as…
from 0, < 1.14.0+ds1-3
MEDIUM5.5Artifex MuPDF 1.14.0 has a SEGV in the function fz_load_page of the fitz/document.c file, as demonstrated by mutool.
from 0, < 1.14.0+ds1-3
MEDIUM5.5In Artifex MuPDF 1.14.0, the svg_run_image function in svg/svg-run.c allows remote attackers to cause a denial of service (href_att NULL po…
from 0, < 1.15.0+ds1-1
MEDIUM5.5In Artifex MuPDF 1.14.0, svg/svg-run.c allows remote attackers to cause a denial of service (recursive calls followed by a fitz/xml.c fz_xm…
from 0, < 1.15.0+ds1-1
MEDIUM5.5In Artifex MuPDF 1.14.0, there is an infinite loop in the function svg_dev_end_tile in fitz/svg-device.c, as demonstrated by mutool.
from 0, < 1.15.0+ds1-1
MEDIUM5.5There is an out-of-bounds read in fz_run_t3_glyph in fitz/font.c in Artifex MuPDF 1.14.0, as demonstrated by mutool.
from 0, < 1.14.0+ds1-3
MEDIUM5.5In Artifex MuPDF 1.13.0, the fz_append_byte function in fitz/buffer.c allows remote attackers to cause a denial of service (segmentation fa…
from 0, < 1.14.0+ds1-4
MEDIUM5.5mupdf - security update
from 0, < 1.14.0+ds1-4
MEDIUM5.5mupdf - security update
from 0, < 1.9a+ds1-4+deb9u5
MEDIUM5.5In Artifex MuPDF 1.12.0 and earlier, multiple use of uninitialized value bugs in the PDF parser could allow an attacker to cause a denial o…
from 0, < 1.13.0+ds1-1
MEDIUM5.5In Artifex MuPDF 1.12.0 and earlier, multiple reachable assertions in the PDF parser allow an attacker to cause a denial of service (assert…
from 0, < 1.13.0+ds1-1
MEDIUM5.5In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service (memory leak) v…
from 0, < 1.14.0+ds1-1
MEDIUM5.5In MuPDF 1.13.0, there is an infinite loop in the fz_skip_space function of the pdf/pdf-xref.c file.
from 0, < 1.13.0+ds1-3
MEDIUM5.5pdf_load_obj_stm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream recursively and therefore run out of error sta…
from 0, < 1.12.0+ds1-1
MEDIUM5.5In Artifex MuPDF 1.12.0, the pdf_read_new_xref function in pdf/pdf-xref.c allows remote attackers to cause a denial of service (segmentatio…
from 0, < 1.13.0+ds1-1
MEDIUM5.5In Artifex MuPDF 1.12.0, there is a heap-based buffer overflow vulnerability in the do_pdf_save_document function in the pdf/pdf-write.c fi…
from 0, < 1.13.0+ds1-1
MEDIUM5.5mupdf - security update
from 0, < 1.13.0+ds1-1
MEDIUM5.5mupdf - security update
from 0, < 1.5-1+deb8u6
MEDIUM5.5Buffer overflow in the my_getline function in jstest_main.c in Mujstest in Artifex Software, Inc.
from 0, < 1.11+ds1-1
MEDIUM5.5mupdf - security update
from 0, < 1.11+ds1-1
MEDIUM5.5mupdf - security update
from 0, < 1.14.0+ds1-4+deb9u1
MEDIUM5.5mupdf - security update
from 0, < 1.9a+ds1-2
MEDIUM5.5mupdf - security update
from 0, < 1.5-1+deb8u2
MEDIUM5.5Heap-based buffer overflow in the fz_subsample_pixmap function in fitz/pixmap.c in MuPDF 1.10a allows remote attackers to cause a denial of…
from 0, < 1.9a+ds1-3
MEDIUM5.5mupdf - security update
from 0, < 1.9a+ds1-1.1
MEDIUM5.5mupdf - security update
from 0, < 1.5-1+deb8u1
—MuPDF before 1.27.0-rc1 contains an uncontrolled recursion vulnerability in the EPUB CSS rendering engine that allows remote attackers to c…
from 0
—MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers to inject arbitrary ANSI escape sequences throug…
from 0
—mupdf - security update
from 0, < 1.3-2
—mupdf - security update
from 0, < 0.9-2+deb7u2