CVE-2024-46657

Artifex Software mupdf v1.24.9 was discovered to contain a segmentation fault via the component /tools/pdfextract.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file...

mupdf:pdf_fuzzer: Use-of-uninitialized-value in show_string

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=4807727535161344 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

mupdf:pdf_fuzzer: Heap-buffer-overflow in eval_sample_func

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=4590883746414592 Project: mupdf Fuzzing Engine: honggfuzz Fuzz Target: pdffuzzer Job Type: honggfuzzasanmupdf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x51400020c9d0...

GLSA-202408-29 : MuPDF: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202408-29 MuPDF: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in MuPDF. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from...

MuPDF: Multiple Vulnerabilities

Background A lightweight PDF, XPS, and E-book viewer. Description Multiple vulnerabilities have been discovered in MuPDF. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround at thi...

MuPDF PDF Viewer Heap Buffer Overflow DoS

The vulnerability of the bmpdecompressrle4 function in the MuPDF PDF viewer software is related to division by zero. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

MuPDF PDF Viewer Heap Buffer Overflow DoS

The vulnerability of the fznewpixmapfromfloatdata function in the MuPDF PDF viewer software is related to division by zero. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

mupdf:pdf_fuzzer: Use-of-uninitialized-value in opj_j2k_decode_tiles

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=6488692326203392 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

ROS-20240807-04

MuPDF PDF viewer's fznewpixmapfromfloatdata function vulnerability is related to the division by zero. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service Vulnerability in bmpdecompressrle4 function of MuPDF PDF viewer is related to division by...

mupdf:pdf_fuzzer: Heap-buffer-overflow in pdf_show_path

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5075793001119744 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzerasanmupdf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x51d000001288...

mupdf:pdf_fuzzer: Heap-buffer-overflow in pdf_show_path

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5331792253485056 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzerasanmupdf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x51e000000a08...

mupdf:pdf_fuzzer: Use-of-uninitialized-value in Eval4Inputs

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=4775841318371328 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

MuPDF PDF Viewer Heap Buffer Overflow DoS

The vulnerability of the GlutAddMenuEntry function in the MuPDF PDF viewer software is related to a memory leak through the MenuEntry variable. Exploiting this vulnerability could allow an attacker to cause a service failure...

MuPDF PDF Viewing DoS

The vulnerability of the pdfmarklistpush component in the MuPDF PDF viewing software is related to an infinite recursion. Exploiting this vulnerability could allow a attacker to cause a service failure...

ROS-20240625-03

A vulnerability in the GlutAddSubMenu function of the MuPDF PDF viewer is related to a memory leak via the MenuEntry variable. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service A vulnerability in the GlutAddMenuEntry function of the MuPDF PDF...

OPENSUSE-SU-2024:12326-1 mupdf-1.20.3-2.1 on GA media

These are all security issues fixed in the mupdf-1.20.3-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10179-1 mupdf-1.10-1.1 on GA media

These are all security issues fixed in the mupdf-1.10-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12021-1 mupdf-1.19.1-1.1 on GA media

These are all security issues fixed in the mupdf-1.19.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13404-1 mupdf-1.23.4-2.1 on GA media

These are all security issues fixed in the mupdf-1.23.4-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11068-1 mupdf-1.18.0-1.7 on GA media

These are all security issues fixed in the mupdf-1.18.0-1.7 package on the GA media of openSUSE Tumbleweed...