Approved changes feed: RSS · Atom
cpe:2.3:a:artifex_software_inc.:mupdf:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Artifex Software Inc. (cf9dbe0a-e851-5730-b79b-1b439354ad88) |
|---|---|
| Product | Mupdf (20190fec-a92a-5cf3-9879-4075092c1ed0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-40505 |
vulnerable | 2026-06-08 08:01:20.807867 |
MuPDF < 1.27 mutool ANSI Injection via Metadata
LOW (3.3)
MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata fields. Attackers can embed malicious ANSI escape codes in PDF metadata that are passed unsanitized to terminal output when running mutool info, enabling them to manipulate terminal display for social engineering attacks such as presenting fake prompts or spoofed commands.
Published: 2026-04-16T01:20:08.397Z
Updated: 2026-07-14T20:00:27.664Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8729 |
vulnerable | 2026-06-08 05:08:14.661018 |
Details available
HIGH (7.5)
An exploitable memory corruption vulnerability exists in the JBIG2 parser of Artifex MuPDF 1.9. A specially crafted PDF can cause a negative number to be passed to a memset resulting in memory corruption and potential code execution. An attacker can specially craft a PDF and send to the victim to trigger this vulnerability.
Published: 2018-04-24T19:00:00.000Z
Updated: 2024-09-16T17:24:06.366Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8728 |
vulnerable | 2026-06-08 05:08:14.659865 |
Details available
HIGH (8.6)
An exploitable heap out of bounds write vulnerability exists in the Fitz graphical library part of the MuPDF renderer. A specially crafted PDF file can cause a out of bounds write resulting in heap metadata and sensitive process memory corruption leading to potential code execution. Victim needs to open the specially crafted file in a vulnerable reader in order to trigger this vulnerability.
Published: 2018-04-24T19:00:00.000Z
Updated: 2024-09-16T18:13:38.660Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.