Description
An integer overflow vulnerability in -pdf-image.c- in Artifex-s MuPDF version 1.27.0 allows an attacker to maliciously craft a PDF that can trigger an integer overflow within the -pdf_load_image_imp- function. This allows a heap out-of-bounds write that could be exploited for arbitrary code execution.
CVSS 7.8EPSS 0.213%Risk 0.79
View source- Published
- 2026-03-31 14:16:12
- Affected versions
- ==1.27.0
- Type
- Package
- Last modified
- 2026-07-25 10:10:00
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H