CVE-2023-51107 — Divide By Zero in Mupdf
Severity
7.5HIGHNVD
EPSS
0.1%
top 78.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 26
Description
A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in functon compute_color() of jquant2.c. NOTE: this is disputed by the supplier because there was not reasonable evidence to determine the existence of a vulnerability or identify the affected product.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6
Affected Packages1 packages
🔴Vulnerability Details
3GHSA▶
GHSA-hh7p-pq2q-6p59: A floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1↗2023-12-26
CVEList▶
CVE-2023-51107: A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1↗2023-12-26
OSV▶
CVE-2023-51107: A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1↗2023-12-26
📋Vendor Advisories
1Debian▶
CVE-2023-51107: mupdf - A floating point exception (divide-by-zero) vulnerability was discovered in Arti...↗2023