cbcvebase.
CVE-2020-19609
published 2021-07-21

CVE-2020-19609: Artifex MuPDF before 1.18.0 has a heap based buffer over-write in tiff_expand_colormap() function when parsing TIFF files allowing attackers to cause a denial…

medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
Artifex MuPDF before 1.18.0 has a heap based buffer over-write in tiff_expand_colormap() function when parsing TIFF files allowing attackers to cause a denial of service.

Affected

7 ranges
VendorProductVersion rangeFixed in
artifexmupdf< 1.18.01.18.0
artifexmupdf>= 0 < 1.17.0+ds1-21.17.0+ds1-2
artifexmupdf>= 0 < 1.17.0+ds1-21.17.0+ds1-2
artifexmupdf>= 0 < 1.17.0+ds1-21.17.0+ds1-2
artifexmupdf>= 0 < 1.17.0+ds1-21.17.0+ds1-2
debiandebian_linux——
debianmupdf< mupdf 1.17.0+ds1-2 (bookworm)mupdf 1.17.0+ds1-2 (bookworm)

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv5.5MEDIUM