What’s Vulnerable › Vulnerabilities

CVE-2023-51104

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-12-26 · updated 2026-06-17
• Weakness: CWE-369

Description

A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function pnm_binary_read_image() of load-pnm.c when span equals zero.

Affected products

• Artifex MuPDF: 1.23.4

References

• http://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=0c06a4e51519515615f6ab2d5b1f25da6771e1f4
• https://bugs.ghostscript.com/show_bug.cgi?id=707621
• https://github.com/dongyuma/sox-defects/blob/main/mupdf-defects.md
• http://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=0c06a4e51519515615f6ab2d5b1f25da6771e1f4
• https://bugs.ghostscript.com/show_bug.cgi?id=707621
• https://github.com/dongyuma/sox-defects/blob/main/mupdf-defects.md

Get alerted when CVE-2023-51104 or the next vulnerability affects your stack