CVE-2026-3308

Name of the Vulnerable Software and Affected Versions MuPDF version 1.27.0

Description An integer overflow occurs in the pdf-image.c file within the pdf load image imp() function. This issue allows an attacker to use a specially crafted PDF to trigger the overflow, leading to a heap out-of-bounds write, which may result in arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Implement sandboxing as a mitigation measure.