CVE-2026-112036mediumCWE-119CWE-415

CVE-2026-112036: falha de média gravidade em Artifex MuPDF

Artifex MuPDF Signature Locking pdf-xref.c free_char_list double free

Publicada em

Seguir esta CVE+ Monitorar MuPDF+ Monitorar mupdf

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

33Vexday Risk Score

Sem sinal de exploração. Ela tem prova de conceito pública.

ssvc Attendcvss 5.3epss 0.3%
A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function free_char_list of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be used. The patch is named 3984925b660afb8a781ddf504021e91be1bc671e. To fix this issue, it is recommended to deploy a patch.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
Artifex · MuPDF
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — Artifex MuPDF

No mesmo produto, das mais perigosas para as menos.

CVE-2026-92413MEDIUMArtifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_filter null pointer dereferenceEPSS 0.6%CVE-2026-7233MEDIUMArtifex MuPDF CFF Index subset-cff.c fz_subset_cff_for_gids out-of-boundsEPSS 0.2%CVE-2025-15569HIGHArtifex MuPDF win_main.c get_system_dpi uncontrolled search pathEPSS 0.1%