What’s Vulnerable › Products

Artifex MuPDF vulnerabilities

70 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your Artifex MuPDF version is affected

Latest Artifex MuPDF vulnerabilities

• CVE-2026-112036 — Artifex MuPDF Signature Locking pdf-xref.c free_char_list double free (CVSS 4.3)
• CVE-2026-92413 — Artifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_filter null pointer dereference (CVSS 4.3)
• CVE-2025-71382 — MuPDF < 1.27.0-rc1 Stack Exhaustion DoS via EPUB CSS Rendering (CVSS 6.5)
• CVE-2026-7233 — Artifex MuPDF CFF Index subset-cff.c fz_subset_cff_for_gids out-of-bounds (CVSS 6.1)
• CVE-2026-40505 — MuPDF < 1.27 mutool ANSI Injection via Metadata (CVSS 3.3)
• CVE-2025-15569 — Artifex MuPDF win_main.c get_system_dpi uncontrolled search path (CVSS 7.0)
• CVE-2026-25556 — MuPDF 1.23.0 through 1.27.0 Barcode Decoding Double Free (CVSS 7.5)
• CVE-2025-55780 — (CVSS 7.5)
• CVE-2025-46206 — (CVSS 6.5)
• CVE-2024-46657 — (CVSS 5.5)
• CVE-2024-24259 — (CVSS 7.5)
• CVE-2024-24258 — (CVSS 7.5)
• CVE-2023-51107 — (CVSS 7.5)
• CVE-2023-51106 — (CVSS 7.5)
• CVE-2023-51105 — (CVSS 7.5)
• CVE-2023-51104 — (CVSS 7.5)
• CVE-2023-51103 — (CVSS 7.5)
• CVE-2023-31794 — (CVSS 5.5)
• CVE-2020-26683 — (CVSS 5.5)
• CVE-2020-21896 — (CVSS 5.5)
• CVE-2021-4216 — (CVSS 5.5)
• CVE-2021-37220 — (CVSS 5.5)
• CVE-2020-19609 — (CVSS 5.5)
• CVE-2021-3407 — (CVSS 5.5)
• CVE-2020-16600 — (CVSS 7.8)