MU
Product
MuPDF
by Artifex · last CVE Oct 19, 2026
70
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 27Medium 38Low 1
Watch

Add MuPDF to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-7321
9.8
3%
Jun 13
Usage of an uninitialized variable in the function fz_load_jpeg in Artifex MuPDF 1.14 can result in a heap overflow vulnerability that allows an attacker to execute arbitrary code
Affected: 1.14.0
CVE-2016-6525
9.8
4%
Sep 22
Heap-based buffer overflow in the pdf_load_mesh_params function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a denial of service (crash) or execute arbitrary code…
Affected: through 1.9
Showing 2