Divide-By-Zero

2024-01-2505:55:41

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

libmupdf.so

divide-by-zero

load-pnm.c

improper validation

denial of service

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

19.1%

JSON

libmupdf.so is vulnerable to Divide-By-Zero. The vulnerability is due to pnm_binary_read_image function within load-pnm.c there is no proper validation of input PNM image data, leading to incorrect calculations of image parameters. This results in scenarios where the function attempts to divide a number by zero and potentially leads to Denial of service.

References

cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=0c06a4e51519515615f6ab2d5b1f25da6771e1f4

bugs.ghostscript.com/show_bug.cgi?id=707621

github.com/dongyuma/sox-defects/blob/main/mupdf-defects.md

github.com/dongyuma/sox-defects/blob/main/mupdf-defects.md#4-a-floating-point-exception-divide-by-zero-issue-was-discovered-in-mupdf-in-functon-pnm_binary_read_image-of-load-pnmc-in-line-519