Read the docs

Artifex Software Inc. *PyMuPDF*

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Artifex Software Inc. *PyMuPDF* records in CISA KEV

No Artifex Software Inc. *PyMuPDF* vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-02617 CVE-2026-3029 · GHSA-cxqh-p2w9-fmr7

Path traversal in Artifex Software Inc. *PyMuPDF* PyMuPDF

Priority MEDIUM 41

A path traversal and arbitrary file write vulnerability exist in the embedded get function in '_main_.py' in PyMuPDF version, 1.26.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00376 Published 2026-03-19 Partial fix · 1.26.7 CWE-22
TI-2026-02856 CVE-2026-3308 · GHSA-6jrq-hjxp-2x5r

Integer overflow in Artifex Software Inc. *PyMuPDF* MuPDF

Priority LOW 35

An integer overflow vulnerability in 'pdf-image.c' in Artifex's MuPDF version 1.27.0 allows an attacker to maliciously craft a PDF that can trigger an integer overflow within the 'pdf_load_image_imp' function.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00217 Published 2026-03-31 No fix listed CWE-190
Open these records in search →