Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2021-37220
HistoryJul 21, 2021 - 10:15 p.m.

CVE-2021-37220

2021-07-2122:15:00
Alpine Linux Development Team
security.alpinelinux.org
11
mupdf
out-of-bounds write
hash table
vulnerability
unix

EPSS

0.001

Percentile

47.7%

MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not properly consider the maximum key size of a hash table. This can, for example, be seen with crafted “mutool draw” input.

OSVersionArchitecturePackageVersionFilename
Alpine3.14-communitynoarchmupdf= 1.18.0-r1UNKNOWN
Alpine3.11-mainnoarchmupdf= 1.16.1-r1UNKNOWN

EPSS

0.001

Percentile

47.7%