CVE-2017-5896
Heap-based buffer overflow in the fz_subsample_pixmap function in fitz/pixmap.c in MuPDF 1.10a...
Heap-based buffer overflow in the fz_subsample_pixmap function in fitz/pixmap.c in MuPDF 1.10a allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted image.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in the fz_subsample_pixmap function in fitz/pixmap.c in MuPDF 1.10a allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted image.
- Record
CVE-2017-5896- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-125
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in the fz_subsample_pixmap function in fitz/pixmap.c in MuPDF 1.10a allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted image.
- Record
CVE-2017-5896- Updated
- 2026-11-02
EUVDEUVD-2017-14971 No score
Heap-based buffer overflow in the fz_subsample_pixmap function in fitz/pixmap.c in MuPDF 1.10a allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted image.
- Record
EUVD-2017-14971- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xr86-842q-jg2r
Heap-based buffer overflow in the fz_subsample_pixmap function in fitz/pixmap.c in MuPDF 1.10a...
Heap-based buffer overflow in the fz_subsample_pixmap function in fitz/pixmap.c in MuPDF 1.10a allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted image.
- Record
GHSA-xr86-842q-jg2r- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVALPINE-CVE-2017-5896
Heap-based buffer overflow in the fz_subsample_pixmap function in fitz/pixmap.c in MuPDF 1.10a allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted image.
- Record
ALPINE-CVE-2017-5896- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
Heap-based buffer overflow in the fz_subsample_pixmap function in fitz/pixmap.c in MuPDF 1.10a allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted image.
- Record
CVE-2017-5896- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2017-5896
Heap-based buffer overflow in the fz_subsample_pixmap function in fitz/pixmap.c in MuPDF 1.10a allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted image.
- Record
DEBIAN-CVE-2017-5896- CVSS 3.0
- 5.5 Medium
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2017-0479 No score
Updated mupdf packages fix security vulnerability
Multiple vulnerabilities have been found in the PDF viewer MuPDF, which may result in denial of service or the execution of arbitrary code if a malformed PDF file is opened (CVE-2016-8674, CVE-2017-5896, CVE-2017-5991)
Terry Chia and Jeremy Heng discovered an integer overflow that can cause arbitrary code execution via a crafted .pdf file (CVE-2017-15587).
- Record
MGASA-2017-0479- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11068-1 No score
mupdf-1.18.0-1.7 on GA media
These are all security issues fixed in the mupdf-1.18.0-1.7 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11068-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mupdfAlpine:v3.10 |
before 1.10a-r1 | 1.10a-r1 |
mupdfAlpine:v3.11 |
before 1.10a-r1 | 1.10a-r1 |
mupdfAlpine:v3.5 |
before 1.10a-r1 | 1.10a-r1 |
mupdfAlpine:v3.6 |
before 1.10a-r1 | 1.10a-r1 |
mupdfAlpine:v3.7 |
before 1.10a-r1 | 1.10a-r1 |
mupdfAlpine:v3.8 |
before 1.10a-r1 | 1.10a-r1 |
mupdfAlpine:v3.9 |
before 1.10a-r1 | 1.10a-r1 |
mupdfDebian:12 |
before 1.9a+ds1-3 | 1.9a+ds1-3 |
mupdfDebian:13 |
before 1.9a+ds1-3 | 1.9a+ds1-3 |
mupdfDebian:14 |
before 1.9a+ds1-3 | 1.9a+ds1-3 |
mupdfDebian:8 |
before 1.5-1+deb8u2, plus listed versions 1.5-11.5-1+deb8u1 |
1.5-1+deb8u2 |
mupdfMageia:5 |
before 1.5-4.5.mga5 | 1.5-4.5.mga5 |
mupdfopenSUSE:Tumbleweed |
before 1.18.0-1.7 | 1.18.0-1.7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2017-5896 is a medium vulnerability (CVSS 5.5) in Artifex Mupdf, published February 15, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.75%, the 77th percentile. Fixed in mupdf 1.10a-r1.
References
openwall.com/lists/oss-security/2017/02/07/1
bugs.ghostscript.com/show_bug.cgi?id=697515
git.ghostscript.com?p=mupdf.git%3Bh=2c4e5867ee699b1081527bc6c6ea0e99a35a5c27
debian.org/security/2017/dsa-3797
securityfocus.com/bid/96139
Show 27 moreShow less
security.gentoo.org/glsa/201702-12
nvd.nist.gov/vuln/detail/CVE-2017-5896
github.com/advisories/GHSA-xr86-842q-jg2r
security.alpinelinux.org/vuln/CVE-2017-5896
security-tracker.debian.org/tracker/CVE-2017-5896
advisories.mageia.org/MGASA-2017-0479.html
bugs.mageia.org/show_bug.cgi?id=20310
suse.com/security/cve/CVE-2016-10132