OSV-2021-212 Heap-buffer-overflow in pdf_get_xref_entry

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29728 Crash type: Heap-buffer-overflow READ 4 Crash state: pdfgetxrefentry pdfcacheobject pdfresolveindirect...

mupdf:pdf_fuzzer: Heap-buffer-overflow in pdf_get_xref_entry

Project: git://git.ghostscript.com/mupdf.git Detailed Report: https://oss-fuzz.com/testcase?key=5401258389274624 Project: mupdf Fuzzing Engine: honggfuzz Fuzz Target: pdffuzzer Job Type: honggfuzzasanmupdf Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x60c00000083c...

WS-2021-0190

Harfbuzz in versions 1.7-rc1 to ios-ice is vulnerable toHeap-buffer-overflow in pdfgetxrefentry, related to source/pdf/pdf-xref.c...

CVE-2018-16647

In Artifex MuPDF 1.13.0, the pdfgetxrefentry function in pdf/pdf-xref.c allows remote attackers to cause a denial of service segmentation fault in fzwritedata in fitz/output.c via a crafted pdf file...

CVE-2018-16647

In Artifex MuPDF 1.13.0, the pdfgetxrefentry function in pdf/pdf-xref.c allows remote attackers to cause a denial of service segmentation fault in fzwritedata in fitz/output.c via a crafted pdf file...

CVE-2018-16647

In Artifex MuPDF 1.13.0, the pdfgetxrefentry function in pdf/pdf-xref.c allows remote attackers to cause a denial of service segmentation fault in fzwritedata in fitz/output.c via a crafted pdf file...

CVE-2018-16647

In Artifex MuPDF 1.13.0, the pdfgetxrefentry function in pdf/pdf-xref.c allows remote attackers to cause a denial of service segmentation fault in fzwritedata in fitz/output.c via a crafted pdf file...

CVE-2018-16647

CVE-2018-16647 affects MuPDF 1.13.0, where pdf_get_xref_entry in pdf/pdf-xref.c can be triggered by a crafted PDF to cause a denial of service (segmentation fault in fz_write_data). Multiple advisories (Ubuntu USN-7825-1, Debian/Nessus plugins) document this vulnerability and indicate remediation...

CVE-2018-16647: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Artifex MuPDF 1.13.0, the pdfgetxrefentry function in pdf/pdf-xref.c allows remote attackers to cause a denial of service segmentation fault in fzwritedata in fitz/output.c via a crafted pdf file...