PT-2020-14873
CVE-2020-16600
·
Published
2020-12-09
·
Updated
2024-07-31
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Artifex Software, Inc. MuPDF library versions 1.17.0-rc1 and earlier
Description
A Use After Free issue exists when a valid page is followed by a page with invalid pixmap dimensions, causing
bander - a static - to point to previously freed memory instead of a newband writer.Recommendations
For versions 1.17.0-rc1 and earlier, consider updating to a newer version to mitigate the risk, however, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾