What’s Vulnerable › Vulnerabilities

CVE-2018-16647

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-09-06 · updated 2026-06-17
• Weakness: CWE-119

Description

In Artifex MuPDF 1.13.0, the pdf_get_xref_entry function in pdf/pdf-xref.c allows remote attackers to cause a denial of service (segmentation fault in fz_write_data in fitz/output.c) via a crafted pdf file.

Affected products

• Artifex MuPDF: 1.13.0

References

• https://bugs.ghostscript.com/show_bug.cgi?id=699686
• https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=351c99d8ce23bbf7099dbd52771a095f67e45a2c
• https://lists.debian.org/debian-lts-announce/2020/07/msg00019.html
• https://bugs.ghostscript.com/show_bug.cgi?id=699686
• https://lists.debian.org/debian-lts-announce/2020/07/msg00019.html

Get alerted when CVE-2018-16647 or the next vulnerability affects your stack