CVE-2016-6265

MEDIUM

MuPDF - Use After Free

Title source: llm

Description

Use-after-free vulnerability in the pdf_load_xref function in pdf/pdf-xref.c in MuPDF allows remote attackers to cause a denial of service (crash) via a crafted PDF file.

References (7)

Scores

CVSS v3 5.5
EPSS 0.0050
EPSS Percentile 65.5%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Classification

CWE
CWE-416
Status published

Affected Products (4)

artifex/mupdf < 1.9
opensuse/leap
opensuse/opensuse
n/a/n/a

Timeline

Published Sep 22, 2016
Tracked Since Feb 18, 2026