PT-2026-141149

CVE-2026-125107

Published

2026-06-26

Updated

2026-11-09

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Muhammara versions prior to 6.0.5

Description A null pointer dereference occurs in the PDFParser::CreateFilterForStream() function within src/deps/PDFWriter/PDFParser.cpp when a PDF stream utilizes the LZWDecode filter and the DecodeParms dictionary lacks the EarlyChange key. Processing an untrusted PDF containing such a stream can lead to an application crash, resulting in a denial of service.

Recommendations Update to version 6.0.5.

Exploitability

Exploit

Fix

Impacts

Researchers

R3D5T0X3

Vendors

Affected products

Weakness enumeration

CWE-476: NULL Pointer Dereference

Related identifiers