CVE-2026-92413

Name of the Vulnerable Software and Affected Versions Artifex MuPDF versions prior to 3df1e30f9d7b77260e13bd0dbe1928ddeba8386e

Description A remote flaw exists in the PDF Xref Loading component within the pdf open filter() function of the pdf-stream.c file. A manipulation of this function can lead to a null pointer dereference, which occurs when a program attempts to read or write to a memory address that is null, typically causing the application to crash.

Recommendations Apply patch 3df1e30f9d7b77260e13bd0dbe1928ddeba8386e. As a temporary workaround, restrict the processing of untrusted PDF files to minimize the risk of exploitation.