What’s Vulnerable › Vulnerabilities

CVE-2016-8728

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-04-24 · updated 2026-06-17
• Weakness: CWE-787

Description

An exploitable heap out of bounds write vulnerability exists in the Fitz graphical library part of the MuPDF renderer. A specially crafted PDF file can cause a out of bounds write resulting in heap metadata and sensitive process memory corruption leading to potential code execution. Victim needs to open the specially crafted file in a vulnerable reader in order to trigger this vulnerability.

Affected products

• Artifex MuPDF: 1.10-rc1

References

• https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0242
• http://www.ghostscript.com/cgi-bin/findgit.cgi?0c86abf954ca4a5f00c26f6600acac93f9fc3538
• https://bugs.ghostscript.com/show_bug.cgi?id=697395
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0242

Get alerted when CVE-2016-8728 or the next vulnerability affects your stack