Segmentation Fault in mupdf Affects Artifex Software PDF Processing
CVE-2024-46657

Currently unrated

Key Information:

Vendor
Artifex Software
Status
mupdf
Vendor
CVE Published:
10 December 2024

Summary

A vulnerability has been identified in Artifex Software's mupdf v1.24.9 through the /tools/pdfextract.c component, allowing attackers to trigger a segmentation fault. This flaw can be exploited by crafting a malicious PDF file, which can lead to a Denial of Service (DoS), effectively interrupting the service and affecting users' access to PDF documents.

References

https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/d...
https://github.com/ArtifexSoftware/mupdf/commit/b5c898a30...
https://gist.github.com/isumitpatel/615e6bd2621cb46b5d980...

Timeline

  • Vulnerability published

.