MU
Product
MuPDF
by Artifex · last CVE Oct 19, 2026
70
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 27Medium 38Low 1
Watch

Add MuPDF to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-16600
7.8
1%
Dec 9
A Use After Free vulnerability exists in Artifex Software, Inc
Affected: through 1.16.1; 1.17.0
CVE-2012-5340
7.8
6%
Jan 23
SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file
Affected: 1.0; 1.1
CVE-2019-13290
7.8
3%
Jul 4
Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fz_append_display_node located at fitz/list-device.c, allowing remote attackers to execute arbitrary code via a crafted…
Affected: 1.15.0
CVE-2018-1000038
7.8
2%
May 24
In Artifex MuPDF 1.12.0 and earlier, a stack buffer overflow in function pdf_lookup_cmap_full in pdf/pdf-cmap.c could allow an attacker to execute arbitrary code via a crafted…
Affected: through 1.12.0
CVE-2016-8729
7.8
2%
Apr 24
An exploitable memory corruption vulnerability exists in the JBIG2 parser of Artifex MuPDF 1.9
Affected: 1.9
CVE-2016-8728
7.8
2%
Apr 24
An exploitable heap out of bounds write vulnerability exists in the Fitz graphical library part of the MuPDF renderer
Affected: 1.10
CVE-2018-1000051
7.8
2%
Feb 9
Artifex Mupdf version 1.12.0 contains a Use After Free vulnerability in fz_keep_key_storable that can result in DOS / Possible code execution
Affected: 1.12.0
CVE-2017-17858
7.8
3%
Jan 22
Heap-based buffer overflow in the ensure_solid_xref function in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 allows a remote attacker to potentially execute arbitrary code via a crafted…
Affected: 1.12.0
CVE-2017-17866
7.8
2%
Dec 27
pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a…
Affected: before 1.12.0
CVE-2017-15587
7.8
1%
Oct 18
An integer overflow was discovered in pdf_read_new_xref_section in pdf/pdf-xref.c in Artifex MuPDF 1.11
Affected: 1.11
CVE-2017-15369
7.8
1%
Oct 16
The build_filter_chain function in pdf/pdf-stream.c in Artifex MuPDF before 2017-09-25 mishandles a certain case where a variable may reside in a register, which allows remote…
Affected: through 1.11
CVE-2017-14687
7.8
1%
Sep 22
Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls…
Affected: 1.11
CVE-2017-14686
7.8
2%
Sep 22
Artifex MuPDF 1.11 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV near NULL starting at…
Affected: 1.11
CVE-2017-14685
7.8
1%
Sep 22
Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls…
Affected: 1.11
CVE-2017-6060
7.8
7%
Mar 15
Stack-based buffer overflow in jstest_main.c in mujstest in Artifex Software, Inc
Affected: 1.10a
CVE-2026-25556
7.5
1%
Feb 6
MuPDF 1.23.0 through 1.27.0 Barcode Decoding Double Free
Affected: 1.23.0 through 1.27.0
CVE-2025-55780
7.5
0%
Sep 23
A null pointer dereference occurs in the function break_word_for_overflow_wrap() in MuPDF 1.26.4 when rendering a malformed EPUB document
Affected: 1.24.0 before 1.26.7
CVE-2024-24258
7.5
1%
Feb 5
freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function
Affected: 1.23.9
CVE-2024-24259
7.5
1%
Feb 5
freeglut through 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddMenuEntry function
Affected: 1.23.9
CVE-2023-51103
7.5
1%
Dec 26
A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in the function fz_new_pixmap_from_float_data() of pixmap.c
Affected: 1.23.4
CVE-2023-51105
7.5
1%
Dec 26
A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function bmp_decompress_rle4() of load-bmp.c
Affected: 1.23.4
CVE-2023-51107
7.5
1%
Dec 26
A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in functon compute_color() of jquant2.c
Affected: 1.23.4
CVE-2023-51104
7.5
1%
Dec 26
A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function pnm_binary_read_image() of load-pnm.c when span equals zero
Affected: 1.23.4
CVE-2023-51106
7.5
1%
Dec 26
A floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in function pnm_binary_read_image() of load-pnm.c when fz_colorspace_n returns zero
Affected: 1.23.4
CVE-2017-5991
7.5
15%
Feb 15
An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465
Affected: before 1.11
CVE-2019-14975
7.1
1%
Aug 14
Artifex MuPDF before 1.16.0 has a heap-based buffer over-read in fz_chartorune in fitz/string.c because pdf/pdf-op-filter.c does not check for a missing string
Affected: before 1.16.0
CVE-2025-15569
7.0
0%
Feb 10
Artifex MuPDF win_main.c get_system_dpi uncontrolled search path
Affected: 1.26.0; 1.26.1
Showing 27