Description
In Artifex MuPDF 1.12.0 and earlier, multiple use of uninitialized value bugs in the PDF parser could allow an attacker to cause a denial of service (crash) or influence program flow via a crafted file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | mupdf | 1.13.0+ds1-1 | — |
| Debian 13 | mupdf | 1.13.0+ds1-1 | — |
| Debian 12 | mupdf | 1.13.0+ds1-1 | — |
| Debian 9 | mupdf | 1.9a+ds1-4+deb9u4 | DSA-4334-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | mupdf | No fix yet | — |
| Ubuntu Pro 16.04 LTS | mupdf | No fix yet | — |
Advisories 1
- DSA-4334-1 mupdf - security update Debian Security (DSA / DLA) · Mar 9, 2026
References
- GLSA-201811-15 vendor-advisory
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5596
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5600
- DSA-4334 vendor-advisory
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5610
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5609
- http://git.ghostscript.com/?p=mupdf.git%3Ba=commitdiff%3Bh=83d4dae44c71816c084a635550acc1a51529b881%3Bhp=f597300439e62f5e921f0d7b1e880b5c1a1f1607
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=5603
- https://bugs.ghostscript.com/show_bug.cgi?id=699086
- https://bugs.ghostscript.com/show_bug.cgi?id=698904
- https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=ace9e69017c08e1e4ce5912014177414c0382004