Segmentation Fault in mupdf Affects Artifex Software PDF Processing
CVE-2024-46657

5.5MEDIUM

Key Information:

Vendor

Artifex Software

Status
mupdf
Vendor
CVE Published:
10 December 2024

What is CVE-2024-46657?

A vulnerability has been identified in Artifex Software's mupdf v1.24.9 through the /tools/pdfextract.c component, allowing attackers to trigger a segmentation fault. This flaw can be exploited by crafting a malicious PDF file, which can lead to a Denial of Service (DoS), effectively interrupting the service and affecting users' access to PDF documents.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/d...
https://github.com/ArtifexSoftware/mupdf/commit/b5c898a30...
https://gist.github.com/isumitpatel/615e6bd2621cb46b5d980...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.