Approved changes feed: RSS · Atom

cpe:2.3:a:artifex:mupdf:1.13.0:*:*:*:*:*:*:*

part: a version: 1.13.0 update: *

VendorArtifex (0075fabc-cec9-5063-a004-04a5c9db1a9b)
ProductMupdf (6f02f53c-b512-52b9-a348-7b443959b13c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-16648 vulnerable 2026-06-08 05:11:05.304583 Details available
In Artifex MuPDF 1.13.0, the fz_append_byte function in fitz/buffer.c allows remote attackers to cause a denial of service (segmentation fault) via a crafted pdf file. This is caused by a pdf/pdf-device.c pdf_dev_alpha array-index underflow.
Published: 2018-09-06T23:00:00.000Z
Updated: 2024-09-12T16:13:55.443Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16647 vulnerable 2026-06-08 05:11:05.304174 Details available
In Artifex MuPDF 1.13.0, the pdf_get_xref_entry function in pdf/pdf-xref.c allows remote attackers to cause a denial of service (segmentation fault in fz_write_data in fitz/output.c) via a crafted pdf file.
Published: 2018-09-06T23:00:00.000Z
Updated: 2024-09-12T16:17:15.479Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10289 vulnerable 2026-06-08 05:10:26.552134 Details available
In MuPDF 1.13.0, there is an infinite loop in the fz_skip_space function of the pdf/pdf-xref.c file. A remote adversary could leverage this vulnerability to cause a denial of service via a crafted pdf file.
Published: 2018-04-22T05:00:00.000Z
Updated: 2024-09-12T16:36:45.112Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.