CVE-2026-112036mediumCWE-119CWE-415

CVE-2026-112036: medium-severity vulnerability in Artifex MuPDF

Artifex MuPDF Signature Locking pdf-xref.c free_char_list double free

Published

Follow this CVE+ Monitor MuPDF+ Monitor mupdf

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 5.3epss 0.3%
A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function free_char_list of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be used. The patch is named 3984925b660afb8a781ddf504021e91be1bc671e. To fix this issue, it is recommended to deploy a patch.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
Artifex · MuPDF
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Artifex MuPDF

In the same product, most dangerous first.

CVE-2026-92413MEDIUMArtifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_filter null pointer dereferenceEPSS 0.6%CVE-2026-7233MEDIUMArtifex MuPDF CFF Index subset-cff.c fz_subset_cff_for_gids out-of-boundsEPSS 0.2%CVE-2025-15569HIGHArtifex MuPDF win_main.c get_system_dpi uncontrolled search pathEPSS 0.1%