Skip to content
Sign in
4.8 Medium

CVE-2026-7233 A vulnerability was determined in Artifex MuPDF

Description

A vulnerability was determined in Artifex MuPDF. The impacted element is the function fz_subset_cff_for_gids of the file subset-cff.c of the component CFF Index Handler. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through a bug report but has not responded yet.

Affected products and versions

Product Affected versions Fixed in
MuPDF 1.28.0 No fix stated
MuPDF 1.27 1.27.0 → 1.27.2 No fix stated
MuPDF 1.26 1.26.0 → 1.26.12 No fix stated
MuPDF 1.25 1.25.0 → 1.25.6 No fix stated
MuPDF 1.24 1.24.0 → 1.24.11 No fix stated

Other CVEs of MuPDF

The 6 CVEs of MuPDF →
CVE-2026-112036 A vulnerability was detected in Artifex MuPDF up to 1.28.5 5.3 Medium CVE-2026-92413 A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9 5.3 Medium CVE-2025-15569 A flaw has been found in Artifex MuPDF up to 1.26.1 on Windows 7.3 High CVE-2021-3407 A flaw was found in mupdf 1.18.0 7.8 High
Track this CVE