Skip to content
OpenAdvisories
Medium · 4.0 CVE-2026-58971 EUVD-2026-115407GHSA-qfj3-8897-jc93

In _mupdf_get_hdr of wprint_mupdf.c, there is a possible out-of-bounds read due to an integer overflow. This could lead to local informatio…

Published Nov 2, 2026 · Updated Nov 6, 2026 · Assigned by google_android

Description

In _mupdf_get_hdr of wprint_mupdf.c, there is a possible out-of-bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 17, 16-qpr2, 16, 15, 14 —

Advisories 2

References