Approved changes feed: RSS · Atom

cpe:2.3:a:artifex:mupdf:1.12.0:*:*:*:*:*:*:*

part: a version: 1.12.0 update: *

VendorArtifex (0075fabc-cec9-5063-a004-04a5c9db1a9b)
ProductMupdf (6f02f53c-b512-52b9-a348-7b443959b13c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-6544 vulnerable 2026-06-08 05:11:53.942415 Details available
pdf_load_obj_stm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream recursively and therefore run out of error stack, which allows remote attackers to cause a denial of service via a crafted PDF document.
Published: 2018-02-02T09:00:00.000Z
Updated: 2024-08-05T06:10:10.104Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6192 vulnerable 2026-06-08 05:11:53.434351 Details available
In Artifex MuPDF 1.12.0, the pdf_read_new_xref function in pdf/pdf-xref.c allows remote attackers to cause a denial of service (segmentation violation and application crash) via a crafted pdf file.
Published: 2018-01-24T21:00:00.000Z
Updated: 2024-09-11T16:38:55.504Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6187 vulnerable 2026-06-08 05:11:53.425979 Details available
In Artifex MuPDF 1.12.0, there is a heap-based buffer overflow vulnerability in the do_pdf_save_document function in the pdf/pdf-write.c file. Remote attackers could leverage the vulnerability to cause a denial of service via a crafted pdf file.
Published: 2018-01-24T10:00:00.000Z
Updated: 2024-09-11T16:35:50.515Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1000051 vulnerable 2026-06-08 05:10:25.364833 Details available
Artifex Mupdf version 1.12.0 contains a Use After Free vulnerability in fz_keep_key_storable that can result in DOS / Possible code execution. This attack appear to be exploitable via Victim opens a specially crafted PDF.
Published: 2018-02-09T23:00:00.000Z
Updated: 2024-09-11T15:53:13.232Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17858 vulnerable 2026-06-08 05:09:10.027997 Details available
Heap-based buffer overflow in the ensure_solid_xref function in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 allows a remote attacker to potentially execute arbitrary code via a crafted PDF file, because xref subsection object numbers are unrestricted.
Published: 2018-01-22T15:00:00.000Z
Updated: 2024-08-05T21:06:49.322Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.