Browse CVEs

HIGH 7.5 CVE-2023-51103 A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in the function fz_new_pixmap_from_float_data() of p… Mupdf No fix yet Fix from $1,9502023-12-26 HIGH 7.5 CVE-2023-51104 A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function pnm_binary_read_image() of load-pnm.c wh… Mupdf No fix yet Fix from $1,9502023-12-26 HIGH 7.5 CVE-2023-51105 A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function bmp_decompress_rle4() of load-bmp.c. Mupdf No fix yet Fix from $1,9502023-12-26 HIGH 7.5 CVE-2023-51106 A floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in function pnm_binary_read_image() of load-pnm.c when fz_co… Mupdf No fix yet Fix from $1,9502023-12-26 HIGH 7.5 CVE-2023-51107 A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in functon compute_color() of jquant2.c. NOTE: this … Mupdf No fix yet Fix from $1,9502023-12-26 MEDIUM 6.5 CVE-2023-46361 Artifex Software jbig2dec v0.20 was discovered to contain a SEGV vulnerability via jbig2_error at /jbig2dec/jbig2.c. Jbig2dec No fix yet Fix from $1,6002023-10-31 MEDIUM 5.5 CVE-2023-31794 MuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdf_mark_list_push. This vulnerability allows attackers to cause a Den… Mupdf Mitigation only Fix from $1,6002023-10-31 HIGH 7.8 CVE-2022-1350 A vulnerability classified as problematic was found in GhostPCL 9.55.0. This vulnerability affects the function chunk_free_object of the file gsmchun… Ghostpcl Mitigation only Fix from $1,9502022-04-14 HIGH 7.8 CVE-2019-13290 Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fz_append_display_node located at fitz/list-device.c, allowing remote attackers to execute a… Mupdf No fix yet Fix from $1,9502019-07-04 CRITICAL 9.8 CVE-2019-12798 An issue was discovered in Artifex MuJS 1.0.5. regcompx in regexp.c does not restrict regular expression program size, leading to an overflow of the … Mujs Mitigation only Fix from $2,3002019-06-13 MEDIUM 5.5 CVE-2019-6130 Artifex MuPDF 1.14.0 has a SEGV in the function fz_load_page of the fitz/document.c file, as demonstrated by mutool. This is related to page-number m… Mupdf No fix yet Fix from $1,6002019-01-11 MEDIUM 5.5 CVE-2019-6131 svg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack consumption in svg_run_use_symbol, svg_run_element, and svg_run_use, as demonstra… Mupdf No fix yet Fix from $1,6002019-01-11 MEDIUM 5.5 CVE-2018-19881 In Artifex MuPDF 1.14.0, svg/svg-run.c allows remote attackers to cause a denial of service (recursive calls followed by a fitz/xml.c fz_xml_att cras… Mupdf No fix yet Fix from $1,6002018-12-06 MEDIUM 5.5 CVE-2018-19882 In Artifex MuPDF 1.14.0, the svg_run_image function in svg/svg-run.c allows remote attackers to cause a denial of service (href_att NULL pointer dere… Mupdf No fix yet Fix from $1,6002018-12-06 MEDIUM 5.5 CVE-2018-18662 There is an out-of-bounds read in fz_run_t3_glyph in fitz/font.c in Artifex MuPDF 1.14.0, as demonstrated by mutool. Mupdf No fix yet Fix from $1,6002018-10-26 MEDIUM 5.5 CVE-2018-16647 In Artifex MuPDF 1.13.0, the pdf_get_xref_entry function in pdf/pdf-xref.c allows remote attackers to cause a denial of service (segmentation fault i… Mupdf No fix yet Fix from $1,6002018-09-06 MEDIUM 5.5 CVE-2018-16648 In Artifex MuPDF 1.13.0, the fz_append_byte function in fitz/buffer.c allows remote attackers to cause a denial of service (segmentation fault) via a… Mupdf No fix yet Fix from $1,6002018-09-06 HIGH 7.8 CVE-2016-8728 An exploitable heap out of bounds write vulnerability exists in the Fitz graphical library part of the MuPDF renderer. A specially crafted PDF file c… Mupdf Mitigation only Fix from $1,9502018-04-24 HIGH 7.8 CVE-2016-8729 An exploitable memory corruption vulnerability exists in the JBIG2 parser of Artifex MuPDF 1.9. A specially crafted PDF can cause a negative number t… Mupdf Mitigation only Fix from $1,9502018-04-24 HIGH 7.8 CVE-2017-15587 An integer overflow was discovered in pdf_read_new_xref_section in pdf/pdf-xref.c in Artifex MuPDF 1.11. Mupdf Mitigation only Fix from $1,9502017-10-18 HIGH 7.8 CVE-2017-14945 Artifex GSView 6.0 Beta on Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, r… Gsview No fix yet Fix from $1,9502017-09-30 HIGH 7.8 CVE-2017-14946 Artifex GSView 6.0 Beta on Windows allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .pdf file, r… Gsview No fix yet Fix from $1,9502017-09-30 HIGH 7.8 CVE-2017-14947 Artifex GSView 6.0 Beta on Windows allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "Rea… Gsview No fix yet Fix from $1,9502017-09-30 HIGH 7.8 CVE-2017-14685 Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data … Mupdf No fix yet Fix from $1,9502017-09-22 HIGH 7.8 CVE-2017-14686 Artifex MuPDF 1.11 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode Write AV … Mupdf No fix yet Fix from $1,9502017-09-22 HIGH 7.8 CVE-2017-14687 Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data … Mupdf No fix yet Fix from $1,9502017-09-22 HIGH 8.8 CVE-2016-7976EPSS 23% The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams. Ghostscript Mitigation only Fix from $1,9502017-08-07 HIGH 7.8 CVE-2017-9610 The xps_load_sfnt_name function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-base… Ghostscript Ghostxps No fix yet Fix from $1,9502017-07-26 HIGH 7.8 CVE-2017-9618 The xps_load_sfnt_name function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (buffer ov… Ghostscript Ghostxps No fix yet Fix from $1,9502017-07-26 HIGH 7.8 CVE-2017-9619 The xps_true_callback_glyph_name function in xps/xpsttf.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (… Ghostscript Ghostxps No fix yet Fix from $1,9502017-07-26