Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-244v-xghf-wq26

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not properly consider the maximum key size of a hash table. This can, for example, be seen with crafted "mutool draw" input.

MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not properly consider the maximum key size of a hash table. This can, for example, be seen with crafted "mutool draw" input.

EPSS

Процентиль: 71%
0.01331
Низкий

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 5 лет назад

MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not properly consider the maximum key size of a hash table. This can, for example, be seen with crafted "mutool draw" input.

CVSS3: 5.5
nvd
больше 5 лет назад

MuPDF through 1.18.1 has an out-of-bounds write because the cached color converter does not properly consider the maximum key size of a hash table. This can, for example, be seen with crafted "mutool draw" input.

CVSS3: 5.5
debian
больше 5 лет назад

MuPDF through 1.18.1 has an out-of-bounds write because the cached col ...

CVSS3: 5.5
altlinux
почти 2 года назад

ALT-PU-2024-17458: package `mupdf` update to version 1.25.2-alt1

CVSS3: 5.5
altlinux
почти 2 года назад

ALT-PU-2024-17298: package `mupdf` update to version 1.25.2-alt1

EPSS

Процентиль: 71%
0.01331
Низкий

Дефекты

CWE-787