Approved changes feed: RSS · Atom

cpe:2.3:a:artifex:mupdf:1.12.0:-:*:*:*:*:*:*

part: a version: 1.12.0 update: -

VendorArtifex (0075fabc-cec9-5063-a004-04a5c9db1a9b)
ProductMupdf (6f02f53c-b512-52b9-a348-7b443959b13c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/mupdf purl2cpe 2026-06-01 10:14:59.690335
pkg:deb/ubuntu/mupdf purl2cpe 2026-06-01 10:14:59.690336
pkg:github/artifexsoftware/mupdf purl2cpe 2026-06-01 10:14:59.690337
pkg:rpm/fedora/mupdf purl2cpe 2026-06-01 10:14:59.690339
pkg:rpm/opensuse/mupdf purl2cpe 2026-06-01 10:14:59.690340

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-5686 vulnerable 2026-06-08 05:11:51.596540 Details available
In MuPDF 1.12.0, there is an infinite loop vulnerability and application hang in the pdf_parse_array function (pdf/pdf-parse.c) because EOF is not considered. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file.
Published: 2018-01-14T02:00:00.000Z
Updated: 2024-09-12T16:34:07.947Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.