MU
Product
MuPDF
70
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 27Medium 38Low 1
Watch
Add MuPDF to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-16600 | 7.8 | Dec 9 | A Use After Free vulnerability exists in Artifex Software, Inc Affected: through 1.16.1; 1.17.0 |
| CVE-2012-5340 | 7.8 | Jan 23 | SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file Affected: 1.0; 1.1 |
| CVE-2019-13290 | 7.8 | Jul 4 | Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fz_append_display_node located at fitz/list-device.c, allowing remote attackers to execute arbitrary code via a crafted… Affected: 1.15.0 |
| CVE-2018-1000038 | 7.8 | May 24 | In Artifex MuPDF 1.12.0 and earlier, a stack buffer overflow in function pdf_lookup_cmap_full in pdf/pdf-cmap.c could allow an attacker to execute arbitrary code via a crafted… Affected: through 1.12.0 |
| CVE-2016-8729 | 7.8 | Apr 24 | An exploitable memory corruption vulnerability exists in the JBIG2 parser of Artifex MuPDF 1.9 Affected: 1.9 |
| CVE-2016-8728 | 7.8 | Apr 24 | An exploitable heap out of bounds write vulnerability exists in the Fitz graphical library part of the MuPDF renderer Affected: 1.10 |
| CVE-2018-1000051 | 7.8 | Feb 9 | Artifex Mupdf version 1.12.0 contains a Use After Free vulnerability in fz_keep_key_storable that can result in DOS / Possible code execution Affected: 1.12.0 |
| CVE-2017-17858 | 7.8 | Jan 22 | Heap-based buffer overflow in the ensure_solid_xref function in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 allows a remote attacker to potentially execute arbitrary code via a crafted… Affected: 1.12.0 |
| CVE-2017-17866 | 7.8 | Dec 27 | pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a… Affected: before 1.12.0 |
| CVE-2017-15587 | 7.8 | Oct 18 | An integer overflow was discovered in pdf_read_new_xref_section in pdf/pdf-xref.c in Artifex MuPDF 1.11 Affected: 1.11 |
| CVE-2017-15369 | 7.8 | Oct 16 | The build_filter_chain function in pdf/pdf-stream.c in Artifex MuPDF before 2017-09-25 mishandles a certain case where a variable may reside in a register, which allows remote… Affected: through 1.11 |
| CVE-2017-14687 | 7.8 | Sep 22 | Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls… Affected: 1.11 |
| CVE-2017-14686 | 7.8 | Sep 22 | Artifex MuPDF 1.11 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV near NULL starting at… Affected: 1.11 |
| CVE-2017-14685 | 7.8 | Sep 22 | Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls… Affected: 1.11 |
| CVE-2017-6060 | 7.8 | Mar 15 | Stack-based buffer overflow in jstest_main.c in mujstest in Artifex Software, Inc Affected: 1.10a |
| CVE-2026-25556 | 7.5 | Feb 6 | MuPDF 1.23.0 through 1.27.0 Barcode Decoding Double Free Affected: 1.23.0 through 1.27.0 |
| CVE-2025-55780 | 7.5 | Sep 23 | A null pointer dereference occurs in the function break_word_for_overflow_wrap() in MuPDF 1.26.4 when rendering a malformed EPUB document Affected: 1.24.0 before 1.26.7 |
| CVE-2024-24258 | 7.5 | Feb 5 | freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function Affected: 1.23.9 |
| CVE-2024-24259 | 7.5 | Feb 5 | freeglut through 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddMenuEntry function Affected: 1.23.9 |
| CVE-2023-51103 | 7.5 | Dec 26 | A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in the function fz_new_pixmap_from_float_data() of pixmap.c Affected: 1.23.4 |
| CVE-2023-51105 | 7.5 | Dec 26 | A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function bmp_decompress_rle4() of load-bmp.c Affected: 1.23.4 |
| CVE-2023-51107 | 7.5 | Dec 26 | A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in functon compute_color() of jquant2.c Affected: 1.23.4 |
| CVE-2023-51104 | 7.5 | Dec 26 | A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function pnm_binary_read_image() of load-pnm.c when span equals zero Affected: 1.23.4 |
| CVE-2023-51106 | 7.5 | Dec 26 | A floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in function pnm_binary_read_image() of load-pnm.c when fz_colorspace_n returns zero Affected: 1.23.4 |
| CVE-2017-5991 | 7.5 | Feb 15 | An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465 Affected: before 1.11 |
| CVE-2019-14975 | 7.1 | Aug 14 | Artifex MuPDF before 1.16.0 has a heap-based buffer over-read in fz_chartorune in fitz/string.c because pdf/pdf-op-filter.c does not check for a missing string Affected: before 1.16.0 |
| CVE-2025-15569 | 7.0 | Feb 10 | Artifex MuPDF win_main.c get_system_dpi uncontrolled search path Affected: 1.26.0; 1.26.1 |
Showing 27
