MU
Product
MuPDF
70
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 27Medium 38Low 1
Watch
Add MuPDF to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1000040 | 5.5 | May 24 | In Artifex MuPDF 1.12.0 and earlier, multiple use of uninitialized value bugs in the PDF parser could allow an attacker to cause a denial of service (crash) or influence program… Affected: through 1.12.0 |
| CVE-2018-1000037 | 5.5 | May 24 | In Artifex MuPDF 1.12.0 and earlier, multiple reachable assertions in the PDF parser allow an attacker to cause a denial of service (assert crash) via a crafted file Affected: through 1.12.0 |
| CVE-2018-1000036 | 5.5 | May 24 | In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service (memory leak) via a crafted file Affected: through 1.12.0 |
| CVE-2018-10289 | 5.5 | Apr 22 | In MuPDF 1.13.0, there is an infinite loop in the fz_skip_space function of the pdf/pdf-xref.c file Affected: 1.13.0 |
| CVE-2018-6544 | 5.5 | Feb 2 | pdf_load_obj_stm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream recursively and therefore run out of error stack, which allows remote attackers to… Affected: 1.12.0 |
| CVE-2018-6192 | 5.5 | Jan 24 | In Artifex MuPDF 1.12.0, the pdf_read_new_xref function in pdf/pdf-xref.c allows remote attackers to cause a denial of service (segmentation violation and application crash) via a… Affected: 1.12.0 |
| CVE-2018-6187 | 5.5 | Jan 24 | In Artifex MuPDF 1.12.0, there is a heap-based buffer overflow vulnerability in the do_pdf_save_document function in the pdf/pdf-write.c file Affected: 1.12.0 |
| CVE-2018-5686 | 5.5 | Jan 14 | In MuPDF 1.12.0, there is an infinite loop vulnerability and application hang in the pdf_parse_array function (pdf/pdf-parse.c) because EOF is not considered Affected: 1.12.0 |
| CVE-2016-10247 | 5.5 | Mar 16 | Buffer overflow in the my_getline function in jstest_main.c in Mujstest in Artifex Software, Inc Affected: through 1.10 |
| CVE-2016-10246 | 5.5 | Mar 16 | Buffer overflow in the main function in jstest_main.c in Mujstest in Artifex Software, Inc Affected: through 1.10 |
| CVE-2016-8674 | 5.5 | Feb 15 | The pdf_to_num function in pdf-object.c in MuPDF before 1.10 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted file Affected: through 1.9a |
| CVE-2017-5896 | 5.5 | Feb 15 | Heap-based buffer overflow in the fz_subsample_pixmap function in fitz/pixmap.c in MuPDF 1.10a allows remote attackers to cause a denial of service (out-of-bounds read and crash)… Affected: through 1.10 |
| CVE-2016-6265 | 5.5 | Sep 22 | Use-after-free vulnerability in the pdf_load_xref function in pdf/pdf-xref.c in MuPDF allows remote attackers to cause a denial of service (crash) via a crafted PDF file Affected: through 1.9 |
| CVE-2017-7264 | 5.3 | Mar 26 | Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap.c in Artifex MuPDF 1.10a allows remote attackers to cause a denial of service (application crash)… Affected: 1.10a |
| CVE-2026-112036 | 4.3 | Oct 19 | Artifex MuPDF Signature Locking pdf-xref.c free_char_list double free Affected: 1.28.0; 1.28.1; 1.28.2; 1.28.3; 1.28.4; 1.28.5 |
| CVE-2026-92413 | 4.3 | Sep 16 | Artifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_filter null pointer dereference Affected: b6d17493700c621c0e70036980a6ebd06d2202c9 |
| CVE-2016-10221 | 4.3 | Apr 3 | The count_entries function in pdf-layer.c in Artifex Software, Inc Affected: 1.10a |
| CVE-2026-40505 | 3.3 | Apr 16 | MuPDF < 1.27 mutool ANSI Injection via Metadata Affected: before 1.27.0 |
| CVE-2014-2013 | – | Mar 3 | Stack-based buffer overflow in the xps_parse_color function in xps/xps-common.c in MuPDF 1.3 and earlier allows remote attackers to execute arbitrary code via a large number of… Affected: through 1.3; 1.0; 1.1; 1.2 |
| CVE-2011-0341 | – | May 13 | Stack-based buffer overflow in the pdfmoz_onmouse function in apps/mozilla/moz_main.c in the MuPDF plug-in 2008.09.02 for Firefox allows remote attackers to execute arbitrary code… Affected: 2008.09.02 |