Skip to content
OpenAdvisories

Package · Debian

pymupdf

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.5
    CVE-2026-120752

    PyMuPDF 1.25.3 before 2.0 Stack Buffer Overflow via add_freetext_annot() Callout

    PyMuPDF 1.25.3 before 2.0 contains a stack-based buffer overflow vulnerability in JM_set_annot_callout_line() that copies a caller-supplied number of callout points into a fixed three-element stack array. Attackers who control the callout argument passed to P…

    PyMuPDF PyMuPDF pymupdf pymupdf Debian Ubuntu
  • High 7.1
    CVE-2026-82035

    PyMuPDF 1.28.2 Path Traversal via extract_objects() Font Branch

    PyMuPDF through 1.28.2, fixed in commit b2c8f3a, contains a path traversal vulnerability in the font branch of extract_objects() in src/__main__.py, where the output filename is constructed by joining a document-controlled BaseFont name directly onto the user…

    PyMuPDF PyMuPDF pymupdf pymupdf Debian Ubuntu
  • High 7.5
    CVE-2026-3029

    CVE-2026-3029

    A path traversal and arbitrary file write vulnerability exist in the embedded get function in '_main_.py' in PyMuPDF version, 1.26.5.

    Artifex Software Inc. *PyMuPDF* PyMuPDF pymupdf pymupdf Debian Ubuntu PyPI