cbcvebase.
CVE-2020-26683
published 2023-08-22

CVE-2020-26683: A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information.

medium5.5CVSS 3.1
AVLACLPRNUIRSUCHINAN
A memory leak issue discovered in /pdf/pdf-font-add.c in Artifex Software MuPDF 1.17.0 allows attackers to obtain sensitive information.

Affected

8 ranges
VendorProductVersion rangeFixed in
artifexmupdf
artifexmupdf>= 0 < 1.19.0+ds1-11.19.0+ds1-1
artifexmupdf>= 0 < 1.19.0+ds1-11.19.0+ds1-1
artifexmupdf>= 0 < 1.19.0+ds1-11.19.0+ds1-1
artifexmupdf>= 0 < 1.7a-1ubuntu0.1~esm11.7a-1ubuntu0.1~esm1
artifexmupdf>= 0 < 1.12.0+ds1-1ubuntu0.1~esm11.12.0+ds1-1ubuntu0.1~esm1
artifexmupdf>= 0 < 1.16.1+ds1-1ubuntu1+esm11.16.1+ds1-1ubuntu1+esm1
debianmupdf< mupdf 1.19.0+ds1-1 (bookworm)mupdf 1.19.0+ds1-1 (bookworm)

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
osv5.5MEDIUM