CVE-2023-51103

A floating point exception divide-by-zero vulnerability was discovered in Artifex MuPDF 1.23.4 in the function fznewpixmapfromfloatdata of pixmap.c...

CVE-2023-51104

A floating point exception divide-by-zero vulnerability was discovered in Artifex MuPDF 1.23.4 in function pnmbinaryreadimage of load-pnm.c when span equals zero...

CVE-2023-51107

A floating point exception divide-by-zero vulnerability was discovered in Artifex MuPDF 1.23.4 in functon computecolor of jquant2.c. NOTE: this is disputed by the supplier because there was not reasonable evidence to determine the existence of a vulnerability or identify the affected product...

CVE-2023-51105

A floating point exception divide-by-zero vulnerability was discovered in Artifex MuPDF 1.23.4 in function bmpdecompressrle4 of load-bmp.c...

CVE-2023-51106

A floating point exception divide-by-zero vulnerability was discovered in mupdf 1.23.4 in function pnmbinaryreadimage of load-pnm.c when fzcolorspacen returns zero...

CVE-2023-51107

A floating point exception divide-by-zero vulnerability was discovered in Artifex MuPDF 1.23.4 in functon computecolor of jquant2.c. NOTE: this is disputed by the supplier because there was not reasonable evidence to determine the existence of a vulnerability or identify the affected product...

MuPDF Number Error Vulnerability

MuPDF is MuPDF open source a free and open source software library written in C . Used to render pages as bitmaps , but also provides support for other operations such as searching and listing directories and links . A numeric error vulnerability exists in MuPDF version 1.23.4 due to a floating...

CVE-2023-51105

CVE-2023-51105 affects MuPDF 1.23.4, with the fault in bmp_decompress_rle4() in load-bmp.c causing a floating point divide-by-zero. This could enable a remote denial of service (per the NVD metrics: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). No exploitation details or fixed version are provided in the...

PT-2023-31765

Name of the Vulnerable Software and Affected Versions mupdf version 1.23.4 Description A floating point exception divide-by-zero vulnerability was discovered in the pnm binary read image function of load-pnm.c when fz colorspace n returns zero. This issue occurs due to a divide-by-zero error, whi...

mupdf:pdf_fuzzer: Use-of-uninitialized-value in _cmsReadHeader

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5685768462663680 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

mupdf:pdf_fuzzer: Heap-buffer-overflow in fz_new_buffer_from_copied_data

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=6122240017825792 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzerasanmupdf Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61900000099e Cras...

mupdf:pdf_fuzzer: Use-of-uninitialized-value in svg_parse_viewbox

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5561869313900544 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

mupdf:pdf_fuzzer: Use-of-uninitialized-value in fz_round_rect

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5919169136427008 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

mupdf:pdf_fuzzer: Crash in fz_new_buffer_from_copied_data

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=6195811620618240 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzerasanmupdf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61910000050d Crash State:...

openSUSE 15 Security Update : mupdf (openSUSE-SU-2023:0363-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2023:0363-1 advisory. - MuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdfmarklistpush. This vulnerability allows attackers to cause a Denial o...

OPENSUSE-SU-2023:0363-1 Security update for mupdf

This update for mupdf fixes the following issues: - CVE-2023-31794: Fixed denial of service via crafted pdf in pdfmarklistpush boo1216728...

Security update for mupdf (moderate)

openSUSE Security Update: Security update for mupdf Announcement ID: openSUSE-SU-2023:0363-1 Rating: moderate References: 1216728 Cross-References: CVE-2023-31794 CVSS scores: CVE-2023-31794 NVD : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP5 An...

mupdf:pdf_fuzzer: Use-of-uninitialized-value in fz_drop_archive

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=4825341402939392 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

Denial Of Service (DoS)

mupdf is vulnerable to Denial of Service DoS. The vulnerability occurs due to a infinite recursion within the pdfmarklistpush component allowing a malicious attacker to cause a potential DoS...

SUSE CVE-2023-31794

MuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdfmarklistpush. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file...