Read the docs

Artifex

Records266All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical31CVSS 9.0–10.0
CVSS high121CVSS 7.0–8.9

Exploited now

Artifex records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

67 records in Mupdf · all components

TI-2021-02374 CVE-2021-3407 · GHSA-5qxg-m35q-xr56

Double free in mupdf

Priority HIGH 69

A flaw was found in mupdf 1.18.0.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.50234 Published 2021-02-23 No fix listed CWE-415
TI-2016-07185 CVE-2016-8728 · GHSA-88g7-mv6v-2x85

Out-of-bounds write in Artifex MuPDF

Priority HIGH 69

An exploitable heap out of bounds write vulnerability exists in the Fitz graphical library part of the MuPDF renderer.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01747 Published 2018-04-24 No fix listed CWE-787
Priority MEDIUM 60

MuPDF versions 1.23.0 through 1.27.0 contain a double-free vulnerability in fz_fill_pixmap_from_display_list() when an exception occurs during display list rendering.

CVSS 4.0MEDIUM 5.9 Network No auth User interaction EPSS 0.00534 Published 2026-02-06 No fix listed CWE-415
Priority MEDIUM 58

A Use After Free vulnerability in svg_dev_text_span_as_paths_defs function in source/fitz/svg-device.c in Artifex Software MuPDF 1.16.0 allows remote attackers to cause a denial of service via opening of a crafted PDF fi…

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00507 Published 2023-08-22 No fix listed CWE-416
Priority MEDIUM 48

Stack-based buffer overflow in the xps_parse_color function in xps/xps-common.c in MuPDF 1.3 and earlier allows remote attackers to execute arbitrary code via a large number of entries in the ContextColor value of the Fi…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.14787 Published 2014-03-03 No fix listed CWE-119
Load more
Open these records in search →