CVE-2023-51105

Name of the Vulnerable Software and Affected Versions MuPDF version 1.23.4

Description A floating point exception vulnerability was discovered in the bmp decompress rle4() function of MuPDF, related to a divide-by-zero error. This issue may allow a remote attacker to cause a denial of service.

Recommendations For MuPDF version 1.23.4, consider disabling the bmp decompress rle4() function as a temporary workaround until a patch is available. Restrict access to the load-bmp.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.