Security vulnerability affects the mupdf package. Heap-based buffer overflow in the ensure solid xref function in pdf/pdf-xref.