Skip to contentArtifex Mupdf vulnerabilities
- artifex mupdfArtifex MuPDF Signature Locking pdf-xref.c free_char_list double freeCVE-2026-112036Fix available5.3 Medium
- artifex mupdfArtifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_filter null pointer dereferenceCVE-2026-924135.3 Medium
- artifex mupdfMuPDF < 1.27.0-rc1 Stack Exhaustion DoS via EPUB CSS RenderingCVE-2025-71382Fix available7.1 High
- artifex mupdfArtifex MuPDF CFF Index subset-cff.c fz_subset_cff_for_gids out-of-boundsCVE-2026-72334.8 Medium
- artifex mupdfMuPDF < 1.27 mutool ANSI Injection via MetadataCVE-2026-40505Fix available4.8 Medium
- artifex mupdfCVE-2026-3308CVE-2026-3308Fix available7.8 High
- artifex mupdfArtifex MuPDF win_main.c get_system_dpi uncontrolled search pathCVE-2025-155697.3 High
- artifex mupdfMuPDF 1.23.0 through 1.27.0 Barcode Decoding Double FreeCVE-2026-25556Fix available5.9 Medium
- artifex mupdfA null pointer dereference occurs in the function break_word_for_overflow_wrap() in MuPDF 1.26.4...CVE-2025-55780Public exploitFix available7.5 High
- artifex mupdfAn issue in Artifex mupdf 1.25.6, 1.25.5 allows a remote attacker to cause a denial of service...CVE-2025-46206Public exploitFix available6.5 Medium
- artifex mupdfArtifex Software mupdf v1.24.9 was discovered to contain a segmentation fault via the component ...CVE-2024-46657Fix available5.5 Medium
- artifex mupdfmupdf v1.23.9 was discovered to contain a memory leak via the menuEntry variable in the...CVE-2024-24259Fix available7.5 High
- artifex mupdfmupdf v1.23.9 was discovered to contain a memory leak via the menuEntry variable in the...CVE-2024-24258Fix available7.5 High
- artifex mupdfA floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in...CVE-2023-51107Disputed7.5 High
- artifex mupdfA floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in...CVE-2023-51106Fix available7.5 High
- artifex mupdfA floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in...CVE-2023-51105Fix available7.5 High
- artifex mupdfA floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in...CVE-2023-51104Fix available7.5 High
- artifex mupdfA floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in...CVE-2023-51103Fix available7.5 High
- artifex mupdfMuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdf_mark_list_push...CVE-2023-31794Fix available5.5 Medium
- artifex mupdfA memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows...CVE-2020-26683Fix available5.5 Medium
- artifex mupdfA Use After Free vulnerability in svg_dev_text_span_as_paths_defs function in source/fitz/svg...CVE-2020-21896Fix available5.5 Medium
- artifex mupdfA Floating point exception (division-by-zero) flaw was found in Mupdf for zero width pages in...CVE-2021-4216Fix available5.5 Medium
- artifex mupdf, fedoraproject fedora +1 moreMuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not...CVE-2021-37220Fix available5.5 Medium
- artifex mupdf, debian linux +1 moreArtifex MuPDF before 1.18.0 has a heap based buffer over-write in tiff_expand_colormap() function...CVE-2020-19609Fix available5.5 Medium
- artifex mupdf, debian linux, fedoraproject fedora +2 moreA flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory...CVE-2021-3407Fix availableEPSS 50.2%5.5 Medium
- artifex mupdfA Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and...CVE-2020-16600Fix available7.8 High
- artifex mupdf, debian linux, fedoraproject fedora +2 morefitz/pixmap.c in Artifex MuPDF 1.17.0 has an overflow during pixmap size calculation.CVE-2020-26519Fix available5.5 Medium
- artifex mupdf, sumatrapdfreader sumatrapdf +1 moreSumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number...CVE-2012-5340Public exploitFix available7.8 High
- artifex mupdfArtifex MuPDF before 1.16.0 has a heap-based buffer over-read in fz_chartorune in fitz/string.c...CVE-2019-149757.1 High
- artifex mupdfArtifex MuPDF 1.15.0 has a heap-based buffer overflow in fz_append_display_node located at fitz...CVE-2019-13290Fix available7.8 High
- artifex mupdfUsage of an uninitialized variable in the function fz_load_jpeg in Artifex MuPDF 1.14 can result...CVE-2019-73219.8 Critical
- artifex mupdfsvg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack consumption in...CVE-2019-6131Fix available5.5 Medium
- artifex mupdfArtifex MuPDF 1.14.0 has a SEGV in the function fz_load_page of the fitz/document.c file, as...CVE-2019-6130Fix available5.5 Medium
- artifex mupdfIn Artifex MuPDF 1.14.0, the svg_run_image function in svg/svg-run.c allows remote attackers to...CVE-2018-19882Fix available5.5 Medium
- artifex mupdfIn Artifex MuPDF 1.14.0, svg/svg-run.c allows remote attackers to cause a denial of service ...CVE-2018-19881Fix available5.5 Medium
- artifex mupdf, debian linux +1 moreIn Artifex MuPDF 1.14.0, there is an infinite loop in the function svg_dev_end_tile in fitz/svg...CVE-2018-19777Fix available5.5 Medium
- artifex mupdfThere is an out-of-bounds read in fz_run_t3_glyph in fitz/font.c in Artifex MuPDF 1.14.0, as...CVE-2018-18662Fix available5.5 Medium
- artifex mupdfIn Artifex MuPDF 1.13.0, the fz_append_byte function in fitz/buffer.c allows remote attackers to...CVE-2018-16648Fix available5.5 Medium
- artifex mupdfIn Artifex MuPDF 1.13.0, the pdf_get_xref_entry function in pdf/pdf-xref.c allows remote...CVE-2018-16647Fix available5.5 Medium
- artifex mupdf, debian linux +1 moreIn MuPDF 1.12.0 and earlier, multiple use of uninitialized value bugs in the PDF parser could...CVE-2018-1000040Fix available5.5 Medium
- artifex mupdfIn MuPDF 1.12.0 and earlier, multiple heap use after free bugs in the PDF parser could allow an...CVE-2018-1000039Fix available7.8 High
- artifex mupdfIn MuPDF 1.12.0 and earlier, a stack buffer overflow in function pdf_lookup_cmap_full in pdf/pdf...CVE-2018-1000038Fix available7.8 High
- artifex mupdf, debian linux +1 moreIn MuPDF 1.12.0 and earlier, multiple reachable assertions in the PDF parser allow an attacker to...CVE-2018-1000037Fix available5.5 Medium
- artifex mupdf, debian linux +1 moreIn MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a...CVE-2018-1000036Fix available5.5 Medium
- artifex mupdfAn exploitable heap out of bounds write vulnerability exists in the Fitz graphical library part...CVE-2016-87288.6 High
- artifex mupdf, debian linux +1 moreIn MuPDF 1.13.0, there is an infinite loop in the fz_skip_space function of the pdf/pdf-xref.c...CVE-2018-10289Fix available5.5 Medium
- artifex mupdf, debian linux +1 moreArtifex Mupdf version 1.12.0 contains a Use After Free vulnerability in fz_keep_key_storable that...CVE-2018-1000051Fix available7.8 High
- artifex mupdf, debian linux +1 morepdf_load_obj_stm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream...CVE-2018-6544Fix available5.5 Medium
- artifex mupdf, debian linux +1 moreIn Artifex MuPDF 1.12.0, the pdf_read_new_xref function in pdf/pdf-xref.c allows remote attackers...CVE-2018-6192Fix available5.5 Medium
- artifex mupdf, debian linux +1 moreIn Artifex MuPDF 1.12.0, there is a heap-based buffer overflow vulnerability in the...CVE-2018-6187Fix available5.5 Medium
- Show olderLoading…