CVE-2026-120752

The PyMuPDF library (versions 1.25.3 before 2.0) is susceptible to a stack-based buffer overflow in the JM_set_annot_callout_line() function. The root cause is the copying of a caller-supplied number of callout points into a fixed three-element stack array. An attacker who controls the callout ar...