CVE-2016-7504

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2016-10-29 · updated 2026-06-17
Weakness: CWE-416

Description

A use-after-free vulnerability was observed in Rp_toString function of Artifex Software, Inc. MuJS before 5c337af4b3df80cf967e4f9f6a21522de84b392a. A successful exploitation of this issue can lead to code execution or denial of service condition.

Affected products

MuJS: through 5000749f5afe3b956fc916e407309de840997f4a

References

http://bugs.ghostscript.com/show_bug.cgi?id=697142
http://www.securityfocus.com/bid/94241
http://bugs.ghostscript.com/show_bug.cgi?id=697142
http://www.securityfocus.com/bid/94241

Get alerted when CVE-2016-7504 or the next vulnerability affects your stack