Description
Artifex MuPDF 1.14.0 has a SEGV in the function fz_load_page of the fitz/document.c file, as demonstrated by mutool. This is related to page-number mishandling in cbz/mucbz.c, cbz/muimg.c, and svg/svg-doc.c.
References (7)
Scores
CVSS v3
5.5
EPSS
0.0019
EPSS Percentile
41.0%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-118
Status
published
Products (1)
artifex/mupdf
1.14.0
Published
Jan 11, 2019
Tracked Since
Feb 18, 2026