CVE-2018-1000038

CVE-2018-1000038 affects MuPDF up to version 1.12.0, where a stack buffer overflow in pdf_lookup_cmap_full (pdf/pdf-cmap.c) could let an attacker execute arbitrary code via a crafted file. Gentoo GLSA and related advisories list MuPDF as vulnerable and recommend upgrading to MuPDF 1.13.0 or later...

CVE-2018-1000039

CVE-2018-1000039 affects MuPDF up to version 1.12.0, where multiple heap use-after-free bugs in the PDF parser could allow code execution, memory disclosure, or denial of service via crafted files. Connected advisories indicate MuPDF fixes were released (e.g., MuPDF 1.13.0+), addressing these vul...

CVE-2018-1000040

CVE-2018-1000040 affects MuPDF up to 1.12.0 (and earlier) where multiple uses of uninitialized values in the PDF parser can cause a crash or allow the attacker to influence program flow via a crafted file. Consequences documented in connected sources include denial of service and potential code e...

CVE-2018-1000040

In Artifex MuPDF 1.12.0 and earlier, multiple use of uninitialized value bugs in the PDF parser could allow an attacker to cause a denial of service crash or influence program flow via a crafted file...

CVE-2018-1000036

In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service memory leak via a crafted file...

CVE-2018-1000039

In Artifex MuPDF 1.12.0 and earlier, multiple heap use after free bugs in the PDF parser could allow an attacker to execute arbitrary code, read memory, or cause a denial of service via a crafted file...

CVE-2018-1000037

In Artifex MuPDF 1.12.0 and earlier, multiple reachable assertions in the PDF parser allow an attacker to cause a denial of service assert crash via a crafted file...

CVE-2018-1000038

In Artifex MuPDF 1.12.0 and earlier, a stack buffer overflow in function pdflookupcmapfull in pdf/pdf-cmap.c could allow an attacker to execute arbitrary code via a crafted file...

CVE-2018-1000036

In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service memory leak via a crafted file...

Denial Of Service (DoS)

MuPDF is vulnerable to denial of serviceDoS. The vulnerability is caused by the use of uninitialized-value in the PDF parser when a malicious file is input...

Denial Of Service (DoS)

MuPDF is vulnerable to denial of serviceDoS. It causes multiple heap-use-after-free reads after free bugs if the attacker inputs a malicious file. It can also lead to arbitrary code execution...

CVE-2018-1000038: Out-of-bounds Write

In Artifex MuPDF 1.12.0 and earlier, a stack buffer overflow in function pdflookupcmapfull in pdf/pdf-cmap.c could allow an attacker to execute arbitrary code via a crafted file...

CVE-2018-1000039: Use After Free

In Artifex MuPDF 1.12.0 and earlier, multiple heap use after free bugs in the PDF parser could allow an attacker to execute arbitrary code, read memory, or cause a denial of service via a crafted file...

CVE-2018-1000036: Missing Release of Resource after Effective Lifetime

In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service memory leak via a crafted file...

CVE-2018-1000040: Improper Input Validation

In Artifex MuPDF 1.12.0 and earlier, multiple use of uninitialized value bugs in the PDF parser could allow an attacker to cause a denial of service crash or influence program flow via a crafted file...

CVE-2018-1000037: Improper Input Validation

In Artifex MuPDF 1.12.0 and earlier, multiple reachable assertions in the PDF parser allow an attacker to cause a denial of service assert crash via a crafted file...

PT-2018-9225 · Artifex +1 · Mupdf +1

Name of the Vulnerable Software and Affected Versions: Artifex MuPDF versions 1.12.0 and earlier Description: The issue allows an attacker to cause a denial of service via a crafted file, exploiting multiple reachable assertions in the PDF parser. Recommendations: For Artifex MuPDF versions 1.12....

PT-2018-9228 · Artifex +1 · Mupdf +1

Name of the Vulnerable Software and Affected Versions: Artifex MuPDF versions 1.12.0 and earlier Description: The issue is related to multiple use of uninitialized value bugs in the PDF parser, which could allow an attacker to cause a denial of service crash or influence program flow via a crafte...

PT-2018-9226 · Artifex +1 · Mupdf +1

Name of the Vulnerable Software and Affected Versions: Artifex MuPDF versions 1.12.0 and earlier Description: A stack buffer overflow in the pdf lookup cmap full function in pdf/pdf-cmap.c could allow an attacker to execute arbitrary code via a crafted file. This issue affects the MuPDF library,...

PT-2018-9227 · Artifex +1 · Mupdf +1

Name of the Vulnerable Software and Affected Versions: Artifex MuPDF versions 1.12.0 and earlier Description: The issue is related to multiple heap use after free bugs in the PDF parser, which could allow an attacker to execute arbitrary code, read memory, or cause a denial of service via a craft...