
Find real vulnerabilities before they ship
In Artifex MuPDF 1.12.0 and earlier, multiple heap use after free bugs in the PDF parser could allow an attacker to execute arbitrary code, read memory, or cause a denial of service via a crafted file.
Base Score
7.8| Base Score | 6.3 |
|---|---|
| Vector String | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
| Base Severity | Medium |
| Version | 3.1 |
| Attack Vector (AV) | NETWORK |