Out-of-Bounds Read Vulnerability in MuPDF by Artifex Software

CVE-2026-58971

What is CVE-2026-58971?

The vulnerability involves a possible out-of-bounds read within the _mupdf_get_hdr function in wprint_mupdf.c, triggered by an integer overflow. This flaw can lead to local information disclosure without requiring any additional execution privileges or user interaction, posing a significant security risk for users of affected versions.

References