PT-2020-14873
CVE-2020-16600
·
تاريخ النشر
2020-12-09
·
تاريخ التحديث
2024-07-31
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Artifex Software, Inc. MuPDF library versions 1.17.0-rc1 and earlier
Description
A Use After Free issue exists when a valid page is followed by a page with invalid pixmap dimensions, causing
bander - a static - to point to previously freed memory instead of a newband writer.Recommendations
For versions 1.17.0-rc1 and earlier, consider updating to a newer version to mitigate the risk, however, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾