CVE-2025-66502

A stored cross-site scripting XSS vulnerability exists in pdfonline.foxit.com within the Page Templates feature. A crafted payload can be stored as the template name, which is later rendered into the DOM without proper sanitization. As a result, the injected script executes each time the affected...

SUSE CVE-2025-59933

libvips is a demand-driven, horizontally threaded image processing library. For versions 8.17.1 and below, when libvips is compiled with support for PDF input via poppler, the pdfload operation is affected by a buffer read overflow when parsing the header of a crafted PDF with a page that defines...

UBUNTU-CVE-2025-59933

libvips is a demand-driven, horizontally threaded image processing library. For versions 8.17.1 and below, when libvips is compiled with support for PDF input via poppler, the pdfload operation is affected by a buffer read overflow when parsing the header of a crafted PDF with a page that defines...

SUSE CVE-2016-6265

Use-after-free vulnerability in the pdfloadxref function in pdf/pdf-xref.c in MuPDF allows remote attackers to cause a denial of service crash via a crafted PDF file...

PT-2021-27603

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves functions such as jpx read image, fz load jpx, and pdf load jpx...

PT-2021-27575

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of Use-of-uninitialized-value. The crash state involves functions such as pdf load version, pdf init document, and p...

PT-2021-27574

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the pdf lex, pdf load cmap, and pdf load embedded cmap...

PT-2018-17624

Name of the Vulnerable Software and Affected Versions Artifex MuPDF version 1.12.0 Description The issue allows remote attackers to cause a denial of service via a crafted PDF document. This is due to the pdf load obj stm function in pdf/pdf-xref.c referencing the object stream recursively, which...

PT-2016-6973

Name of the Vulnerable Software and Affected Versions MuPDF affected versions not specified Description The issue is related to a heap-based buffer overflow in the pdf load mesh params function, which can be triggered by a large decode array. This can cause a denial of service crash or potentiall...

PT-2016-6814

Name of the Vulnerable Software and Affected Versions MuPDF affected versions not specified Description The issue is related to a use-after-free vulnerability in the pdf load xref function, which can be exploited by remote attackers using a crafted PDF file, leading to a denial of service crash...