Skip to content
OpenAdvisories
Unscored DLA-2289-1 5 CVEs

mupdf - security update

Published Jul 26, 2020 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 9 mupdf 1.9a+ds1-4+deb9u5

Vulnerabilities 5

  • Unscored —

    In Artifex MuPDF 1.13.0, the pdf_get_xref_entry function in pdf/pdf-xref.c allows remote attackers to cause a denial of…

  • Unscored —

    In Artifex MuPDF 1.13.0, the fz_append_byte function in fitz/buffer.c allows remote attackers to cause a denial of serv…

  • Unscored —

    There is an out-of-bounds read in fz_run_t3_glyph in fitz/font.c in Artifex MuPDF 1.14.0, as demonstrated by mutool.

  • Unscored —

    Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fz_append_display_node located at fitz/list-device.c, allowing…

  • Unscored —

    Artifex MuPDF 1.14.0 has a SEGV in the function fz_load_page of the fitz/document.c file, as demonstrated by mutool. Th…