Niel Duysters

**Name of the Vulnerable Software and Affected Versions** MuPDF mutool (affected versions not specified) **Description** MuPDF mutool fails to sanitize PDF metadata fields before writing them to terminal output. This allows the injection of arbitrary ANSI escape sequences—codes used to control terminal formatting and cursor position—through crafted PDF metadata. When running the 'mutool info' command, these unsanitized codes can be used to clear the terminal display and render arbitrary text, which could facilitate social engineering attacks such as presenting fake prompts or spoofed commands. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.