Browse CVEs

HIGH 7.5 CVE-2023-51103 A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in the function fz_new_pixmap_from_float_data() of p… Mupdf No fix yet Fix from $1,9502023-12-26 HIGH 7.5 CVE-2023-51104 A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function pnm_binary_read_image() of load-pnm.c wh… Mupdf No fix yet Fix from $1,9502023-12-26 HIGH 7.5 CVE-2023-51105 A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function bmp_decompress_rle4() of load-bmp.c. Mupdf No fix yet Fix from $1,9502023-12-26 HIGH 7.5 CVE-2023-51106 A floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in function pnm_binary_read_image() of load-pnm.c when fz_co… Mupdf No fix yet Fix from $1,9502023-12-26 HIGH 7.5 CVE-2023-51107 A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in functon compute_color() of jquant2.c. NOTE: this … Mupdf No fix yet Fix from $1,9502023-12-26 HIGH 7.5 CVE-2023-46751 An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows remote attackers to crash the … Ghostscript after 10.02.0 Fix from $1,9502023-12-06 MEDIUM 6.5 CVE-2023-46361 Artifex Software jbig2dec v0.20 was discovered to contain a SEGV vulnerability via jbig2_error at /jbig2dec/jbig2.c. Jbig2dec No fix yet Fix from $1,6002023-10-31 MEDIUM 5.5 CVE-2023-31794 MuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdf_mark_list_push. This vulnerability allows attackers to cause a Den… Mupdf Mitigation only Fix from $1,6002023-10-31 MEDIUM 5.5 CVE-2020-26683 A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information. Mupdf Patch available Fix from $1,6002023-08-22 HIGH 7.8 CVE-2020-21890 Buffer Overflow vulnerability in clj_media_size function in devices/gdevclj.c in Artifex Ghostscript 9.50 allows remote attackers to cause a denial o… Ghostscript Patch available Fix from $1,9502023-08-22 MEDIUM 5.5 CVE-2020-21896 A Use After Free vulnerability in svg_dev_text_span_as_paths_defs function in source/fitz/svg-device.c in Artifex Software MuPDF 1.16.0 allows remote… Mupdf Patch available Fix from $1,6002023-08-22 MEDIUM 5.5 CVE-2020-21710 A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of s… Ghostscript Patch available Fix from $1,6002023-08-22 MEDIUM 5.5 CVE-2023-38560 An integer overflow flaw was found in pcl/pl/plfont.c:418 in pl_glyph_name in ghostscript. This issue may allow a local attacker to cause a denial of… Ghostscript Patch available Fix from $1,6002023-08-01 HIGH 7.5 CVE-2021-33796 In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service. Mujs 1.1.2+ Fix from $1,9502023-07-07 CRITICAL 9.8 CVE-2021-33797 Buffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1. An integer overflow happens when js_strtod() reads in floating point exponent… Mujs after 1.1.1 Fix from $2,3002023-04-17 MEDIUM 5.5 CVE-2021-4216 A Floating point exception (division-by-zero) flaw was found in Mupdf for zero width pages in muraster.c. It is fixed in Mupdf-1.20.0-rc1 upstream. Mupdf 1.20.0+ Fix from $1,6002022-08-26 HIGH 7.8 CVE-2022-1350 A vulnerability classified as problematic was found in GhostPCL 9.55.0. This vulnerability affects the function chunk_free_object of the file gsmchun… Ghostpcl Mitigation only Fix from $1,9502022-04-14 CRITICAL 9.8 CVE-2021-45005 Artifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by conflicting JumpList of nested try/finally statements. Mujs Patch available Fix from $2,3002022-02-14 HIGH 7.5 CVE-2020-22885 Buffer overflow vulnerability in mujs before 1.0.8 due to recursion in the GC scanning phase, allows remote attackers to cause a denial of service. Mujs 1.0.8+ Fix from $1,9502021-07-13 HIGH 7.5 CVE-2020-22886 Buffer overflow vulnerability in function jsG_markobject in jsgc.c in mujs before 1.0.8, allows remote attackers to cause a denial of service. Mujs 1.0.8+ Fix from $1,9502021-07-13 HIGH 7.8 CVE-2020-16600 A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with in… Mupdf after 1.16.1 Fix from $1,9502020-12-09 HIGH 7.8 CVE-2020-24343 Artifex MuJS through 1.0.7 has a use-after-free in jsrun.c because of unconditional marking in jsgc.c. Mujs after 1.0.7 Fix from $1,9502020-08-13 HIGH 7.1 CVE-2019-14975 Artifex MuPDF before 1.16.0 has a heap-based buffer over-read in fz_chartorune in fitz/string.c because pdf/pdf-op-filter.c does not check for a miss… Mupdf 1.16.0+ Fix from $1,9502019-08-14 HIGH 7.8 CVE-2019-13290 Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fz_append_display_node located at fitz/list-device.c, allowing remote attackers to execute a… Mupdf No fix yet Fix from $1,9502019-07-04 CRITICAL 9.8 CVE-2019-7321 Usage of an uninitialized variable in the function fz_load_jpeg in Artifex MuPDF 1.14 can result in a heap overflow vulnerability that allows an atta… Mupdf Patch available Fix from $2,3002019-06-13 CRITICAL 9.8 CVE-2019-12798 An issue was discovered in Artifex MuJS 1.0.5. regcompx in regexp.c does not restrict regular expression program size, leading to an overflow of the … Mujs Mitigation only Fix from $2,3002019-06-13 MEDIUM 5.5 CVE-2017-15652 Artifex Ghostscript 9.22 is affected by: Obtain Information. The impact is: obtain sensitive information. The component is: affected source code file… Ghostscript Patch available Fix from $1,6002019-05-23 HIGH 7.5 CVE-2019-11413 An issue was discovered in Artifex MuJS 1.0.5. It has unlimited recursion because the match function in regexp.c lacks a depth check. Mujs Patch available Fix from $1,9502019-04-22 CRITICAL 9.8 CVE-2019-11411 An issue was discovered in Artifex MuJS 1.0.5. The Number#toFixed() and numtostr implementations in jsnumber.c have a stack-based buffer overflow. Mujs Patch available Fix from $2,3002019-04-22 MEDIUM 5.5 CVE-2019-6130 Artifex MuPDF 1.14.0 has a SEGV in the function fz_load_page of the fitz/document.c file, as demonstrated by mutool. This is related to page-number m… Mupdf No fix yet Fix from $1,6002019-01-11