CVE-2018-1000037

In Artifex MuPDF 1.12.0 and earlier, multiple reachable assertions in the PDF parser allow an attacker to cause a denial of service assert crash via a crafted file...

CVE-2018-1000040

In Artifex MuPDF 1.12.0 and earlier, multiple use of uninitialized value bugs in the PDF parser could allow an attacker to cause a denial of service crash or influence program flow via a crafted file...

CVE-2018-1000037

In Artifex MuPDF 1.12.0 and earlier, multiple reachable assertions in the PDF parser allow an attacker to cause a denial of service assert crash via a crafted file...

CVE-2018-1000037

In Artifex MuPDF 1.12.0 and earlier, multiple reachable assertions in the PDF parser allow an attacker to cause a denial of service assert crash via a crafted file...

CVE-2018-1000038

In Artifex MuPDF 1.12.0 and earlier, a stack buffer overflow in function pdflookupcmapfull in pdf/pdf-cmap.c could allow an attacker to execute arbitrary code via a crafted file...

CVE-2018-1000039

In Artifex MuPDF 1.12.0 and earlier, multiple heap use after free bugs in the PDF parser could allow an attacker to execute arbitrary code, read memory, or cause a denial of service via a crafted file...

CVE-2018-1000036

In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service memory leak via a crafted file...

CVE-2018-1000040

In Artifex MuPDF 1.12.0 and earlier, multiple use of uninitialized value bugs in the PDF parser could allow an attacker to cause a denial of service crash or influence program flow via a crafted file...

CVE-2018-1000036

In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service memory leak via a crafted file...

CVE-2018-1000040

In Artifex MuPDF 1.12.0 and earlier, multiple use of uninitialized value bugs in the PDF parser could allow an attacker to cause a denial of service crash or influence program flow via a crafted file...

CVE-2018-1000040

CVE-2018-1000040 affects MuPDF up to 1.12.0 (and earlier) where multiple uses of uninitialized values in the PDF parser can cause a crash or allow the attacker to influence program flow via a crafted file. Consequences documented in connected sources include denial of service and potential code e...

CVE-2018-1000039

CVE-2018-1000039 affects MuPDF up to version 1.12.0, where multiple heap use-after-free bugs in the PDF parser could allow code execution, memory disclosure, or denial of service via crafted files. Connected advisories indicate MuPDF fixes were released (e.g., MuPDF 1.13.0+), addressing these vul...

CVE-2018-1000036

In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service memory leak via a crafted file...

CVE-2018-1000039

In Artifex MuPDF 1.12.0 and earlier, multiple heap use after free bugs in the PDF parser could allow an attacker to execute arbitrary code, read memory, or cause a denial of service via a crafted file...

CVE-2018-1000037

CVE-2018-1000037 affects MuPDF up to 1.12.0 and earlier, where multiple reachable assertions in MuPDF’s PDF parser can be exploited to cause a denial of service (assert crash) via a crafted file. The issue is tied to the PDF parser’s handling of crafted input, enabling a local impact when process...

CVE-2018-1000036

MuPDF vulnerability CVE-2018-1000036 affects MuPDF 1.12.0 and earlier, caused by memory leaks in the PDF parser that can lead to DoS. Public advisories (Debian DLA-2765, Gentoo GLSA-201811-15, Ubuntu USN-7825-1, OpenVAS/ Nessus entries) corroborate multiple memory-management issues in MuPDF's PDF...

CVE-2018-1000038

In Artifex MuPDF 1.12.0 and earlier, a stack buffer overflow in function pdflookupcmapfull in pdf/pdf-cmap.c could allow an attacker to execute arbitrary code via a crafted file...

CVE-2018-1000038

CVE-2018-1000038 affects MuPDF up to version 1.12.0, where a stack buffer overflow in pdf_lookup_cmap_full (pdf/pdf-cmap.c) could let an attacker execute arbitrary code via a crafted file. Gentoo GLSA and related advisories list MuPDF as vulnerable and recommend upgrading to MuPDF 1.13.0 or later...

Denial Of Service (DoS)

MuPDF is vulnerable to denial of serviceDoS. The vulnerability is caused by the use of uninitialized-value in the PDF parser when a malicious file is input...

Denial Of Service (DoS)

MuPDF is vulnerable to denial of serviceDoS. It causes multiple heap-use-after-free reads after free bugs if the attacker inputs a malicious file. It can also lead to arbitrary code execution...