Heap Overflow Vulnerability in Artifex MuPDF by Artifex Software
CVE-2019-7321

9.8CRITICAL

Key Information:

Vendor
Artifex
Status
MuPDF
Vendor
CVE Published:
13 June 2019

Summary

A vulnerability exists within Artifex MuPDF 1.14 due to the usage of an uninitialized variable in the fz_load_jpeg function. This flaw can lead to a heap overflow, potentially allowing attackers to execute arbitrary code. Exploiting this vulnerability may result in unauthorized actions and compromise system security.

References

https://bugs.ghostscript.com/show_bug.cgi?id=700560
https://github.com/ereisr00/bagofbugz/tree/master/MuPDF/7...
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/c...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.