Vulnerabilities > Artifex > Mupdf > Medium
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-10-31 | CVE-2023-31794 | Uncontrolled Recursion vulnerability in Artifex Mupdf 1.21.1 MuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdf_mark_list_push. | 5.5 |
2023-08-22 | CVE-2020-21896 | Use After Free vulnerability in Artifex Mupdf 1.16.0 A Use After Free vulnerability in svg_dev_text_span_as_paths_defs function in source/fitz/svg-device.c in Artifex Software MuPDF 1.16.0 allows remote attackers to cause a denial of service via opening of a crafted PDF file. | 5.5 |
2023-08-22 | CVE-2020-26683 | Memory Leak vulnerability in Artifex Mupdf 1.17.0 A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information. | 5.5 |
2022-08-26 | CVE-2021-4216 | Divide By Zero vulnerability in Artifex Mupdf A Floating point exception (division-by-zero) flaw was found in Mupdf for zero width pages in muraster.c. | 5.5 |
2021-07-21 | CVE-2021-37220 | Out-of-bounds Write vulnerability in multiple products MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not properly consider the maximum key size of a hash table. | 5.5 |
2021-07-21 | CVE-2020-19609 | Out-of-bounds Write vulnerability in multiple products Artifex MuPDF before 1.18.0 has a heap based buffer over-write in tiff_expand_colormap() function when parsing TIFF files allowing attackers to cause a denial of service. | 5.5 |
2021-02-23 | CVE-2021-3407 | A flaw was found in mupdf 1.18.0. | 5.5 |
2020-10-02 | CVE-2020-26519 | Out-of-bounds Write vulnerability in multiple products Artifex MuPDF before 1.18.0 has a heap based buffer over-write when parsing JBIG2 files allowing attackers to cause a denial of service. | 5.5 |
2019-01-11 | CVE-2019-6131 | Uncontrolled Recursion vulnerability in Artifex Mupdf 1.14.0 svg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack consumption in svg_run_use_symbol, svg_run_element, and svg_run_use, as demonstrated by mutool. | 5.5 |
2019-01-11 | CVE-2019-6130 | Range Error vulnerability in Artifex Mupdf 1.14.0 Artifex MuPDF 1.14.0 has a SEGV in the function fz_load_page of the fitz/document.c file, as demonstrated by mutool. | 5.5 |