CVE-2024-46657

The Artifex Software mupdf v1.24.9 component /tools/pdfextract.c is vulnerable to a segmentation fault caused by incorrect memory handling. This flaw allows an attacker to trigger a Denial of Service (DoS) by providing a crafted PDF file . Remediation and patches are available for specific distri...

CVE-2024-46657

Artifex Software mupdf v1.24.9 was discovered to contain a segmentation fault via the component /tools/pdfextract.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file...

Artifex Software MuPDF 安全漏洞

Artifex Software MuPDF is a free, lightweight PDF reader from Artifex Software, USA. A security vulnerability exists in Artifex Software MuPDF v1.24.9, which originates from the discovery of the inclusion of a segmentation error via the component /tools/pdfextract.c. The vulnerability can be...

PT-2024-32098

Name of the Vulnerable Software and Affected Versions Artifex Software mupdf version 1.24.9 Description A segmentation fault was discovered in the /tools/pdfextract.c component, allowing attackers to cause a Denial of Service DoS via a crafted PDF file. The issue is related to the pdfextract.c...

CVE-2024-46657: Buffer Copy without Checking Size of Input

Artifex Software mupdf v1.24.9 was discovered to contain a segmentation fault via the component /tools/pdfextract.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file...

CVE-2024-46657

Artifex Software mupdf v1.24.9 was discovered to contain a segmentation fault via the component /tools/pdfextract.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file...

mupdf:pdf_fuzzer: Use-of-uninitialized-value in show_string

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=4807727535161344 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

mupdf:pdf_fuzzer: Heap-buffer-overflow in eval_sample_func

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=4590883746414592 Project: mupdf Fuzzing Engine: honggfuzz Fuzz Target: pdffuzzer Job Type: honggfuzzasanmupdf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x51400020c9d0...

GLSA-202408-29 : MuPDF: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202408-29 MuPDF: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in MuPDF. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from...

MuPDF: Multiple Vulnerabilities

Background A lightweight PDF, XPS, and E-book viewer. Description Multiple vulnerabilities have been discovered in MuPDF. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no known workaround at thi...

The vulnerability of the fz_new_pixmap_from_float_data() function in the MuPDF PDF viewer software, which allows a hacker to trigger a service failure.

The vulnerability of the fznewpixmapfromfloatdata function in the MuPDF PDF viewer software is related to division by zero. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the bmp_decompress_rle4() function in the MuPDF PDF viewer software, which allows a hacker to trigger a service failure.

The vulnerability of the bmpdecompressrle4 function in the MuPDF PDF viewer software is related to division by zero. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

mupdf:pdf_fuzzer: Use-of-uninitialized-value in opj_j2k_decode_tiles

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=6488692326203392 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

ROS-20240807-04

MuPDF PDF viewer's fznewpixmapfromfloatdata function vulnerability is related to the division by zero. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service Vulnerability in bmpdecompressrle4 function of MuPDF PDF viewer is related to division by...

mupdf:pdf_fuzzer: Heap-buffer-overflow in pdf_show_path

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5075793001119744 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzerasanmupdf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x51d000001288...

mupdf:pdf_fuzzer: Heap-buffer-overflow in pdf_show_path

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5331792253485056 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzerasanmupdf Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x51e000000a08...

mupdf:pdf_fuzzer: Use-of-uninitialized-value in Eval4Inputs

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=4775841318371328 Project: mupdf Fuzzing Engine: libFuzzer Fuzz Target: pdffuzzer Job Type: libfuzzermsanmupdf Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

The vulnerability of the GlutAddMenuEntry() function in the MuPDF PDF viewer software, which allows a hacker to trigger a service failure.

The vulnerability of the GlutAddMenuEntry function in the MuPDF PDF viewer software is related to a memory leak through the MenuEntry variable. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the pdf_mark_list_push component in the MuPDF PDF viewing software allows a hacker to trigger a service failure.

The vulnerability of the pdfmarklistpush component in the MuPDF PDF viewing software is related to an infinite recursion. Exploiting this vulnerability could allow a attacker to cause a service failure...

ROS-20240625-03

A vulnerability in the GlutAddSubMenu function of the MuPDF PDF viewer is related to a memory leak via the MenuEntry variable. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service A vulnerability in the GlutAddMenuEntry function of the MuPDF PDF...