Descrição
An integer overflow vulnerability in -pdf-image.c- in Artifex-s MuPDF version 1.27.0 allows an attacker to maliciously craft a PDF that can trigger an integer overflow within the -pdf_load_image_imp- function. This allows a heap out-of-bounds write that could be exploited for arbitrary code execution.
CVSS 7.8EPSS 0.213%Risco 0.79
Ver fonte- Publicação
- 2026-03-31 14:16:12
- Versões afetadas
- ==1.27.0
- Tipo
- Package
- Última alteração
- 2026-07-25 10:10:00
- Vetor
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H