Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mupdf vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv3
CVE-2024-24259
freeglut up to and including 3.4.0 exists to contain a memory leak via the menuEntry variable in the glutAddMenuEntry function.
Artifex Mupdf 1.23.9
7.5
CVSSv3
CVE-2023-51103
A floating point exception (divide-by-zero) vulnerability exists in mupdf 1.23.4 in functon fz_new_pixmap_from_float_data() of pixmap.c.
Artifex Mupdf 1.23.4
7.5
CVSSv3
CVE-2023-51104
A floating point exception (divide-by-zero) vulnerability exists in mupdf 1.23.4 in function pnm_binary_read_image() of load-pnm.c when span equals zero.
Artifex Mupdf 1.23.4
7.5
CVSSv3
CVE-2023-51105
A floating point exception (divide-by-zero) vulnerability exists in mupdf 1.23.4 in function bmp_decompress_rle4() of load-bmp.c.
Artifex Mupdf 1.23.4
7.5
CVSSv3
CVE-2023-51106
A floating point exception (divide-by-zero) vulnerability exists in mupdf 1.23.4 in function pnm_binary_read_image() of load-pnm.c when fz_colorspace_n returns zero.
Artifex Mupdf 1.23.4
7.5
CVSSv3
CVE-2023-51107
A floating point exception (divide-by-zero) vulnerability exists in mupdf 1.23.4 in functon compute_color() of jquant2.c.
Artifex Mupdf 1.23.4
7.5
CVSSv3
CVE-2017-5991
An issue exists in Artifex MuPDF prior to 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdf_run_xobject function in pdf-op-run.c encounters a NULL pointer dereference during a Fitz fz_paint_pixmap_with_mask painting operation. Versions 1.11 and later are unaffected.
Artifex Mupdf
Debian Debian Linux 8.0
Debian Debian Linux 9.0
1 EDB exploit
7.1
CVSSv3
CVE-2019-14975
Artifex MuPDF prior to 1.16.0 has a heap-based buffer over-read in fz_chartorune in fitz/string.c because pdf/pdf-op-filter.c does not check for a missing string.
Artifex Mupdf
6.5
CVSSv3
CVE-2017-9216
libjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer dereference in the jbig2_huffman_get function in jbig2_huffman.c. For example, the jbig2dec utility will crash (segmentation fault) when parsing an invalid file.
Artifex Jbig2dec 0.13
Debian Debian Linux 9.0
5.5
CVSSv3
CVE-2023-31794
MuPDF v1.21.1 exists to contain an infinite recursion in the component pdf_mark_list_push. This vulnerability allows malicious users to cause a Denial of Service (DoS) via a crafted PDF file.
Artifex Mupdf 1.21.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-30310
CVE-2024-21683
CVE-2024-22187
chrome
deserialization
XPath injection
CVE-2024-27842
denial of service
CVE-2024-24851
google
CVE-2024-35400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »