CVE-2017-7264 — Use After Free in Mupdf

CWE-416 — Use After Free7 documents6 sources
Severity
5.3MEDIUMNVD
EPSS
0.2%
top 58.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Artifex Mupdf
Timeline
PublishedMar 26
Latest updateMay 17

Description

Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap.c in Artifex MuPDF 1.10a allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted document.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

▶Debianartifex/mupdf< 1.9a+ds1-3+3
▶NVDartifex/mupdf1.10a

Patches

Patch: blogs.gentoo.org ↗Patch: blogs.gentoo.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-vm7h-gxx5-wrm7: Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap↗2022-05-17
▶
CVEList
CVE-2017-7264: Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap↗2017-03-26
▶
OSV
CVE-2017-7264: Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap↗2017-03-26
▶

📋Vendor Advisories

1
Debian
CVE-2017-7264: mupdf - Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap....↗2017
▶

💬Community

2
Bugzilla
CVE-2017-7264 mupdf: use-after-free in fz_subsample_pixmap (pixmap.c)↗2017-03-27
▶
Bugzilla
CVE-2017-7264 mupdf: use-after-free in fz_subsample_pixmap (pixmap.c) [fedora-all]↗2017-03-27
▶
CVE-2017-7264 — Use After Free in Artifex Mupdf | cvebase