1612 matches found
CVE-2018-16648
In Artifex MuPDF 1.13.0, the fzappendbyte function in fitz/buffer.c allows remote attackers to cause a denial of service segmentation fault via a crafted pdf file. This is caused by a pdf/pdf-device.c pdfdevalpha array-index underflow...
CVE-2018-16647
In Artifex MuPDF 1.13.0, the pdfgetxrefentry function in pdf/pdf-xref.c allows remote attackers to cause a denial of service segmentation fault in fzwritedata in fitz/output.c via a crafted pdf file...
CVE-2018-16647
CVE-2018-16647 affects MuPDF 1.13.0, where pdf_get_xref_entry in pdf/pdf-xref.c can be triggered by a crafted PDF to cause a denial of service (segmentation fault in fz_write_data). Multiple advisories (Ubuntu USN-7825-1, Debian/Nessus plugins) document this vulnerability and indicate remediation...
CVE-2018-16648
MuPDF (Artifex MuPDF) 1.13.0 is affected by CVE-2018-16648 where the fz_append_byte function in fitz/buffer.c can be triggered by a crafted PDF causing a denial of service (segfault) due to a pdf_dev_alpha array-index underflow. Affected advisories/patches across distros include: Debian DLA-2289-...
CVE-2018-16647
In Artifex MuPDF 1.13.0, the pdfgetxrefentry function in pdf/pdf-xref.c allows remote attackers to cause a denial of service segmentation fault in fzwritedata in fitz/output.c via a crafted pdf file...
CVE-2018-16648
In Artifex MuPDF 1.13.0, the fzappendbyte function in fitz/buffer.c allows remote attackers to cause a denial of service segmentation fault via a crafted pdf file. This is caused by a pdf/pdf-device.c pdfdevalpha array-index underflow...
CVE-2018-16647: Improper Restriction of Operations within the Bounds of a Memory Buffer
In Artifex MuPDF 1.13.0, the pdfgetxrefentry function in pdf/pdf-xref.c allows remote attackers to cause a denial of service segmentation fault in fzwritedata in fitz/output.c via a crafted pdf file...
CVE-2018-16648: Improper Validation of Array Index
In Artifex MuPDF 1.13.0, the fzappendbyte function in fitz/buffer.c allows remote attackers to cause a denial of service segmentation fault via a crafted pdf file. This is caused by a pdf/pdf-device.c pdfdevalpha array-index underflow...
PT-2018-13669
Name of the Vulnerable Software and Affected Versions Artifex MuPDF version 1.13.0 Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault, via a crafted pdf file. This occurs due to a problem in the pdf get xref entry function. Recommendation...
PT-2018-13670
Name of the Vulnerable Software and Affected Versions Artifex MuPDF version 1.13.0 Description The issue allows remote attackers to cause a denial of service, resulting in a segmentation fault, by providing a crafted pdf file. This is due to an array-index underflow in the pdf dev alpha array in...
mupdf/pdf_fuzzer: Use-of-uninitialized-value in load_cid_font
Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5651564811780096 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
mupdf/pdf_fuzzer: Use-of-uninitialized-value in jbig2_decode_generic_template3
Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5645021143891968 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
mupdf/pdf_fuzzer: Heap-use-after-free in pdf_copy_pattern_gstate
Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5748743025459200 Project: mupdf Fuzzer: aflmupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: aflasanmupdf Platform Id: linux Crash Type: Heap-use-after-free READ Crash Address: 0x62d0000136c8 Cras...
mupdf/pdf_fuzzer: Stack-buffer-underflow in ps_index
Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=6241403096006656 Project: mupdf Fuzzer: aflmupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: aflasanmupdf Platform Id: linux Crash Type: Stack-buffer-underflow READ 8 Crash Address: 0x7fde52864418...
mupdf/pdf_fuzzer: Use-of-uninitialized-value in fz_maxi
Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=4803533114179584 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
mupdf/pdf_fuzzer: Use-of-uninitialized-value in jbig2_decode_symbol_dict
Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5362428123545600 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
mupdf/pdf_fuzzer: Use-of-uninitialized-value in jbig2_huffman_get
Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=6313924507992064 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
mupdf/pdf_fuzzer: Crash in jbig2_decode_mmr_init
Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=6047162705117184 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x71c0000c64db Cras...
mupdf/pdf_fuzzer: Use-of-uninitialized-value in jbig2_immediate_generic_region
Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5819198591729664 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...
mupdf/pdf_fuzzer: Use-of-uninitialized-value in jbig2_arith_bytein
Project: git://git.ghostscript.com/mupdf.git Detailed report: https://oss-fuzz.com/testcase?key=5705474702835712 Project: mupdf Fuzzer: libFuzzermupdfpdffuzzer Fuzz target binary: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...