Out-of-Bounds Read Vulnerability in Artifex MuPDF Software

CVE-2018-18662

Summary

An out-of-bounds read vulnerability exists in the MuPDF library, specifically in the function fz_run_t3_glyph within fitz/font.c. This flaw could be exploited under certain conditions by crafted PDF documents, enabling an attacker to access portions of memory outside the intended bounds, potentially leading to information disclosure or application instability. Users of MuPDF version 1.14.0 should apply the necessary security updates to mitigate associated risks.

References