CVE-2020-19609

Name of the Vulnerable Software and Affected Versions Artifex MuPDF versions prior to 1.18.0

Description The issue is related to a heap-based buffer over-write in the tiff expand colormap() function when parsing TIFF files. This allows attackers to cause a denial of service. The exploitation of this issue can be initiated remotely.

Recommendations For versions prior to 1.18.0, update to version 1.18.0 or later to resolve the issue. As a temporary workaround, consider disabling the tiff expand colormap() function until a patch is available.