llpp

Link package | bugs open | bugs closed | Wiki | GitHub | web search
Description Unknown
Version Removed

Resolved

Group Affected Fixed Severity Status Ticket
AVG-1704 33-1 33-2 Medium Fixed FS#70054
AVG-690 27-1 27-2 High Fixed FS#57486
Issue Group Severity Remote Type Description
CVE-2021-3407 AVG-1704 Medium No Arbitrary code execution
A security issue was found in mupdf 1.18.0. Double free of an object during linearization may lead to memory corruption and other potential consequences.
CVE-2018-1000051 AVG-690 High No Arbitrary code execution
Artifex Mupdf version 1.12.0 contains a use-after-free vulnerability in fz_keep_key_storable that can result in DOS / Possible code execution. This attack...
CVE-2018-6544 AVG-690 Medium Yes Denial of service
pdf_load_obj_stm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream recursively and therefore run out of error stack, which allows...
CVE-2018-6192 AVG-690 Medium No Denial of service
In Artifex MuPDF 1.12.0, the pdf_read_new_xref function in pdf/pdf- xref.c allows remote attackers to cause a denial of service (segmentation violation and...
CVE-2018-6187 AVG-690 Medium No Denial of service
In Artifex MuPDF 1.12.0, there is a heap-based buffer overflow vulnerability in the do_pdf_save_document function in the pdf/pdf- write.c file. Remote...
CVE-2018-5686 AVG-690 Medium No Denial of service
In MuPDF 1.12.0, there is an infinite loop vulnerability and application hang in the pdf_parse_array function (pdf/pdf-parse.c) because EOF is not...

Advisories

Date Advisory Group Severity Type
10 May 2018 ASA-201805-8 AVG-690 High multiple issues