CVE-2025-46206

There is a denial of service vulnerability in MuPDF 1.25.6 and earlier versions. When an attacker runs the "mutool clean poc /dev/null" command, the program will fall into an infinite recursion between the stripoutlines and stripoutline functions in pdf-clean-file.c until the stack is exhausted...

CVE-2025-55780

CVE-2025-55780 Null Pointer De-reference in MuPDF 1.26.4 EPUB Rendering Function CVE Reference - CVE-2025-55780 Affected Versions : 1.26.7 and before are affected Found and tested on : 1.26.4 Severity CVSSv3 score : 7.5 High Fixed in commit :...

PT-2026-135750

In mupdf get hdr of wprint mupdf.c, there is a possible out-of-bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

[SECURITY] Fedora 45 Update: mupdf-1.28.2-3.fc45

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

[SECURITY] Fedora 43 Update: mupdf-1.27.2-5.fc43

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

Fedora 45 : mupdf (2026-dd418bdfde)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-dd418bdfde advisory. fix CVE-2026-112036 rhbz2558213 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 43 : mupdf (2026-2fd016c93c)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2fd016c93c advisory. fix CVE-2026-112036 rhbz2558213 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

CLEANSTART-2024-ZV91553 Artifex MuPDF before 1

Security vulnerability affects the mupdf package. Artifex MuPDF before 1...

CLEANSTART-2024-YI57102 flaw was found in mupdf 1

Security vulnerability affects the mupdf package. A flaw was found in mupdf 1...

PT-2026-142551

Security vulnerability affects the mupdf package. In MuPDF 1...

PT-2026-142430

Security vulnerability affects the mupdf package. Heap-based buffer overflow in the ensure solid xref function in pdf/pdf-xref...

[SECURITY] Fedora 44 Update: mupdf-1.28.2-3.fc44

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

Fedora 44 : mupdf (2026-10ad8af11a)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-10ad8af11a advisory. fix CVE-2026-112036 rhbz2558213 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 46 : mupdf (2026-70d51c6891)

The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-70d51c6891 advisory. Automatic update for mupdf-1.28.2-4.fc46. Changelog Fri Oct 23 2026 Michael J Gruber - 1.28.2-4 - fix CVE-2026-112036 rhbz2558213 Tenable has extracted the...

CVE-2026-112036

A flaw was found in MuPDF. A double-free memory vulnerability exists in the signature locking component when processing certain PDF documents. A remote attacker could exploit this flaw by enticing a user to open a specially crafted document, causing an application crash that results in a denial o...

SUSE CVE-2026-112036

A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function freecharlist of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be use...

CVE-2026-112036

A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function freecharlist of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be use...

DEBIAN-CVE-2026-112036

A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function freecharlist of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be use...

CVE-2026-112036

A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function freecharlist of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be use...

UBUNTU-CVE-2026-112036

A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function freecharlist of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be use...