| Bug | jessie | stretch | buster | bullseye | bookworm | trixie | sid | Description |
|---|
| CVE-2023-31794 | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | fixed | fixed | MuPDF v1.21.1 was discovered to contain an infinite recursion in the c ... |
| CVE-2021-37220 | vulnerable | fixed | vulnerable (no DSA) | fixed | fixed | fixed | fixed | MuPDF through 1.18.1 has an out-of-bounds write because the cached col ... |
| CVE-2021-3407 | vulnerable | fixed | fixed | fixed | fixed | fixed | fixed | A flaw was found in mupdf 1.18.0. Double free of object during lineari ... |
| CVE-2020-26519 | vulnerable | fixed | fixed | fixed | fixed | fixed | fixed | Artifex MuPDF before 1.18.0 has a heap based buffer over-write when pa ... |
| CVE-2020-21896 | vulnerable | vulnerable | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | fixed | A Use After Free vulnerability in svg_dev_text_span_as_paths_defs func ... |
| CVE-2020-19609 | vulnerable | fixed | vulnerable (no DSA) | fixed | fixed | fixed | fixed | Artifex MuPDF before 1.18.0 has a heap based buffer over-write in tiff ... |
| CVE-2020-16600 | vulnerable | fixed | fixed | fixed | fixed | fixed | fixed | A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF ... |
| CVE-2018-16648 | vulnerable (no DSA, ignored) | fixed | fixed | fixed | fixed | fixed | fixed | In Artifex MuPDF 1.13.0, the fz_append_byte function in fitz/buffer.c ... |
| CVE-2018-16647 | vulnerable (no DSA, ignored) | fixed | fixed | fixed | fixed | fixed | fixed | In Artifex MuPDF 1.13.0, the pdf_get_xref_entry function in pdf/pdf-xr ... |
| CVE-2018-6187 | vulnerable (no DSA) | fixed | fixed | fixed | fixed | fixed | fixed | In Artifex MuPDF 1.12.0, there is a heap-based buffer overflow vulnera ... |
| CVE-2017-17866 | vulnerable (no DSA) | fixed | fixed | fixed | fixed | fixed | fixed | pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain leng ... |
| CVE-2017-14687 | vulnerable (no DSA) | fixed | fixed | fixed | fixed | fixed | fixed | Artifex MuPDF 1.11 allows attackers to cause a denial of service or po ... |
| Bug | jessie | stretch | buster | bullseye | bookworm | trixie | sid | Description |
|---|
| CVE-2023-51107 | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | A floating point exception (divide-by-zero) vulnerability was discover ... |
| CVE-2023-51106 | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | A floating point exception (divide-by-zero) vulnerability was discover ... |
| CVE-2023-51105 | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | A floating point exception (divide-by-zero) vulnerability was discover ... |
| CVE-2023-51104 | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | A floating point exception (divide-by-zero) vulnerability was discover ... |
| CVE-2023-51103 | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | vulnerable | A floating point exception (divide-by-zero) vulnerability was discover ... |
| CVE-2021-4216 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | fixed | fixed | A Floating point exception (division-by-zero) flaw was found in Mupdf ... |
| CVE-2020-26683 | vulnerable | vulnerable | vulnerable | vulnerable | fixed | fixed | fixed | A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Softw ... |
| CVE-2018-1000036 | vulnerable | fixed | fixed | fixed | fixed | fixed | fixed | In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF ... |
| CVE-2018-19882 | vulnerable | fixed | fixed | fixed | fixed | fixed | fixed | In Artifex MuPDF 1.14.0, the svg_run_image function in svg/svg-run.c a ... |
| CVE-2018-19881 | vulnerable | fixed | fixed | fixed | fixed | fixed | fixed | In Artifex MuPDF 1.14.0, svg/svg-run.c allows remote attackers to caus ... |
| CVE-2018-19777 | vulnerable | vulnerable | vulnerable | fixed | fixed | fixed | fixed | In Artifex MuPDF 1.14.0, there is an infinite loop in the function svg ... |
| CVE-2017-6060 | vulnerable | fixed | fixed | fixed | fixed | fixed | fixed | Stack-based buffer overflow in jstest_main.c in mujstest in Artifex So ... |
| CVE-2016-10247 | vulnerable | fixed | fixed | fixed | fixed | fixed | fixed | Buffer overflow in the my_getline function in jstest_main.c in Mujstes ... |
| CVE-2016-10246 | vulnerable | fixed | fixed | fixed | fixed | fixed | fixed | Buffer overflow in the main function in jstest_main.c in Mujstest in A ... |
| Bug | Description |
|---|
| CVE-2019-14975 | Artifex MuPDF before 1.16.0 has a heap-based buffer over-read in fz_ch ... |
| CVE-2019-13290 | Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fz_append_dis ... |
| CVE-2019-7321 | Usage of an uninitialized variable in the function fz_load_jpeg in Art ... |
| CVE-2019-6131 | svg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack co ... |
| CVE-2019-6130 | Artifex MuPDF 1.14.0 has a SEGV in the function fz_load_page of the fi ... |
| CVE-2018-1000051 | Artifex Mupdf version 1.12.0 contains a Use After Free vulnerability i ... |
| CVE-2018-1000040 | In Artifex MuPDF 1.12.0 and earlier, multiple use of uninitialized val ... |
| CVE-2018-1000039 | In Artifex MuPDF 1.12.0 and earlier, multiple heap use after free bugs ... |
| CVE-2018-1000038 | In Artifex MuPDF 1.12.0 and earlier, a stack buffer overflow in functi ... |
| CVE-2018-1000037 | In Artifex MuPDF 1.12.0 and earlier, multiple reachable assertions in ... |
| CVE-2018-18662 | There is an out-of-bounds read in fz_run_t3_glyph in fitz/font.c in Ar ... |
| CVE-2018-10289 | In MuPDF 1.13.0, there is an infinite loop in the fz_skip_space functi ... |
| CVE-2018-6544 | pdf_load_obj_stm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could refer ... |
| CVE-2018-6192 | In Artifex MuPDF 1.12.0, the pdf_read_new_xref function in pdf/pdf-xre ... |
| CVE-2018-5686 | In MuPDF 1.12.0, there is an infinite loop vulnerability and applicati ... |
| CVE-2017-17858 | Heap-based buffer overflow in the ensure_solid_xref function in pdf/pd ... |
| CVE-2017-15587 | An integer overflow was discovered in pdf_read_new_xref_section in pdf ... |
| CVE-2017-15369 | The build_filter_chain function in pdf/pdf-stream.c in Artifex MuPDF b ... |
| CVE-2017-14686 | Artifex MuPDF 1.11 allows attackers to execute arbitrary code or cause ... |
| CVE-2017-14685 | Artifex MuPDF 1.11 allows attackers to cause a denial of service or po ... |
| CVE-2017-7264 | Use-after-free vulnerability in the fz_subsample_pixmap function in fi ... |
| CVE-2017-5991 | An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9 ... |
| CVE-2017-5896 | Heap-based buffer overflow in the fz_subsample_pixmap function in fitz ... |
| CVE-2016-10221 | The count_entries function in pdf-layer.c in Artifex Software, Inc. Mu ... |
| CVE-2016-8728 | An exploitable heap out of bounds write vulnerability exists in the Fi ... |
| CVE-2016-8674 | The pdf_to_num function in pdf-object.c in MuPDF before 1.10 allows re ... |
| CVE-2016-6525 | Heap-based buffer overflow in the pdf_load_mesh_params function in pdf ... |
| CVE-2016-6265 | Use-after-free vulnerability in the pdf_load_xref function in pdf/pdf- ... |
| CVE-2014-2013 | Stack-based buffer overflow in the xps_parse_color function in xps/xps ... |
| CVE-2012-5340 | SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer ... |