Lucene search
+L

1359 matches found

CNNVD
CNNVD
added 2023/10/31 12:0 a.m.7 views

Artifex Software MuPDF Security Vulnerability

Artifex Software MuPDF is a free and lightweight PDF reader from Artifex Software, USA. A security vulnerability exists in Artifex Software MuPDF v1.21.1, which originates from the inclusion of infinite recursion in the component pdfmarklistpush. An attacker could exploit this vulnerability to...

5.5CVSS6.7AI score0.00233EPSS
SaveExploits0References4
OSV
OSV
added 2023/10/31 12:0 a.m.18 views

CVE-2023-31794

MuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdfmarklistpush. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file...

5.5CVSS7.2AI score0.00233EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2023/10/31 12:0 a.m.21 views

CVE-2023-31794

MuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdfmarklistpush. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file...

5.5CVSS6.1AI score0.00233EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2023/10/31 12:0 a.m.34 views

CVE-2023-31794

MuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdfmarklistpush. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PDF file...

5.5AI score0.00233EPSS
SaveExploits0References3
Veracode
Veracode
added 2023/08/30 4:22 a.m.16 views

Memory Leak

mupdf is vulnerable to Memory Leak. The vulnerability exists in the pdf-font-add.c, which allows an attacker to gain sensitive information...

5.5CVSS6.8AI score0.00282EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
added 2023/08/25 3:6 a.m.27 views

Use After Free

mupdf is vulnerable to Use After Free. The vulnerability occurs in the svgdevtextspanaspathsdefs function within source/fitz/svg-device.c which allows a malicious attacker to parse a crafted PDF file which results in denial of service...

5.5CVSS6.7AI score0.00445EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2023/08/22 7:16 p.m.22 views

CVE-2020-26683

A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information...

5.5CVSS5.3AI score0.00282EPSS
SaveExploits1References2
OSV
OSV
added 2023/08/22 7:16 p.m.19 views

CVE-2020-26683

A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information...

5.5CVSS6.8AI score
SaveExploits0References2
OSV
OSV
added 2023/08/22 7:16 p.m.1 views

DEBIAN-CVE-2020-21896

A Use After Free vulnerability in svgdevtextspanaspathsdefs function in source/fitz/svg-device.c in Artifex Software MuPDF 1.16.0 allows remote attackers to cause a denial of service via opening of a crafted PDF file...

5.5CVSS5.5AI score0.00445EPSS
SaveExploits1References1
NVD
NVD
added 2023/08/22 7:16 p.m.20 views

CVE-2020-21896

A Use After Free vulnerability in svgdevtextspanaspathsdefs function in source/fitz/svg-device.c in Artifex Software MuPDF 1.16.0 allows remote attackers to cause a denial of service via opening of a crafted PDF file...

5.5CVSS5.4AI score0.00445EPSS
SaveExploits1References3
OSV
OSV
added 2023/08/22 7:16 p.m.21 views

CVE-2020-21896

A Use After Free vulnerability in svgdevtextspanaspathsdefs function in source/fitz/svg-device.c in Artifex Software MuPDF 1.16.0 allows remote attackers to cause a denial of service via opening of a crafted PDF file...

5.5CVSS7.1AI score
SaveExploits0References3
Prion
Prion
added 2023/08/22 7:16 p.m.17 views

Memory corruption

A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information...

1.9CVSS5.3AI score0.00282EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2023/08/22 7:16 p.m.34 views

CVE-2020-26683

A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information...

5.5CVSS6.1AI score0.00282EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2023/08/22 7:16 p.m.32 views

CVE-2020-21896

A Use After Free vulnerability in svgdevtextspanaspathsdefs function in source/fitz/svg-device.c in Artifex Software MuPDF 1.16.0 allows remote attackers to cause a denial of service via opening of a crafted PDF file...

5.5CVSS6.1AI score0.00445EPSS
SaveExploits1References4
OSV
OSV
added 2023/08/22 7:16 p.m.3 views

UBUNTU-CVE-2020-21896

A Use After Free vulnerability in svgdevtextspanaspathsdefs function in source/fitz/svg-device.c in Artifex Software MuPDF 1.16.0 allows remote attackers to cause a denial of service via opening of a crafted PDF file...

5.5CVSS6.1AI score0.00445EPSS
SaveExploits1References5
Prion
Prion
added 2023/08/22 7:16 p.m.18 views

Design/Logic Flaw

A Use After Free vulnerability in svgdevtextspanaspathsdefs function in source/fitz/svg-device.c in Artifex Software MuPDF 1.16.0 allows remote attackers to cause a denial of service via opening of a crafted PDF file...

1.9CVSS5.4AI score0.00445EPSS
SaveExploits1References1Affected Software1
Snyk
Snyk
added 2023/08/22 6:44 p.m.2 views

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime through the /pdf/pdf-font-add.c component. An attacker can obtain sensitive information by exploiting a memory leak issue. Remediation Upgrade mupdf to version 1.18.0 or higher...

6.8CVSS5.2AI score0.00282EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/08/22 12:0 a.m.29 views

CVE-2020-21896

A Use After Free vulnerability in svgdevtextspanaspathsdefs function in source/fitz/svg-device.c in Artifex Software MuPDF 1.16.0 allows remote attackers to cause a denial of service via opening of a crafted PDF file...

5.4AI score0.00445EPSS
SaveExploits1References2
CVE
CVE
added 2023/08/22 12:0 a.m.51 views

CVE-2020-21896

CVE-2020-21896 affects MuPDF, specifically the use-after-free in svg_dev_text_span_as_paths_defs within source/fitz/svg-device.c for MuPDF 1.16.0. The vulnerability could allow a remote attacker to cause a denial of service by opening a crafted PDF file. Several advisories document vendor patches...

5.5CVSS5.4AI score0.00445EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/22 12:0 a.m.12 views

CVE-2020-26683

A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information...

6.8AI score0.00282EPSS
SaveExploits1References2
Rows per page
Query Builder