Lucene search

Mupdf Security Vulnerabilities - 2020

cve

CVE-2012-5340

SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file.

7.8CVSS

7.3AI Score

0.007EPSS

2020-01-23 10:15 PM

cve

CVE-2020-16600

A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newband_writer.

7.8CVSS

7.4AI Score

0.001EPSS

2020-12-09 09:15 PM

cve

CVE-2020-26519

Artifex MuPDF before 1.18.0 has a heap based buffer over-write when parsing JBIG2 files allowing attackers to cause a denial of service.

5.5CVSS

5.3AI Score

0.003EPSS

2020-10-02 06:15 AM