cbcvebase.
CVE-2021-3407
published 2021-02-23

CVE-2021-3407: A flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory corruption and other potential consequences.

medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
A flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory corruption and other potential consequences.

Affected

14 ranges
VendorProductVersion rangeFixed in
artifexmupdf
artifexmupdf
artifexmupdf>= 0 < 1.17.0+ds1-1.31.17.0+ds1-1.3
artifexmupdf>= 0 < 1.17.0+ds1-1.31.17.0+ds1-1.3
artifexmupdf>= 0 < 1.17.0+ds1-1.31.17.0+ds1-1.3
artifexmupdf>= 0 < 1.17.0+ds1-1.31.17.0+ds1-1.3
artifexmupdf>= 0 < 1.7a-1ubuntu0.1~esm11.7a-1ubuntu0.1~esm1
artifexmupdf>= 0 < 1.12.0+ds1-1ubuntu0.1~esm11.12.0+ds1-1ubuntu0.1~esm1
artifexmupdf>= 0 < 1.16.1+ds1-1ubuntu1+esm11.16.1+ds1-1ubuntu1+esm1
debiandebian_linux
debianmupdf< mupdf 1.17.0+ds1-1.3 (bookworm)mupdf 1.17.0+ds1-1.3 (bookworm)
fedoraprojectfedora
fedoraprojectfedora
fedoraprojectfedora

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv5.5MEDIUM