Known vulnerabilities in mupdf (Alpine package)

Known vulnerabilities in mupdf (Alpine package)

Vendor: Alpine Linux Development Team

Software: mupdf (Alpine package)

Software CPE: cpe:2.3:o:alpine:mupdf_alpine_package:*:*:*:*:*:alpine_linux:*:*

Website: https://alpinelinux.org/

Total vulnerabilities: 12

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (12)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU47952 - Out-of-bounds write CVE-2020-26519	CWE-787	Medium	No	No	1.17.0-r3	02.10.2020	SB2020100223 SB2020102818 SB2020112305 and 3 more
#VU12560 - Memory corruption CVE-2018-6192	CWE-119	Low	No	No	1.13.0-r0	10.05.2018	SB2018051013 SB2018051022 SB2018051023 and 6 more
#VU12558 - Heap-based Buffer Overflow CVE-2018-6187	CWE-122	Low	No	No	1.13.0-r0	10.05.2018	SB2018051013 SB2018051022 SB2018051023 and 6 more
#VU12557 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2018-5686	CWE-835	Low	No	No	1.13.0-r0	10.05.2018	SB2018051013 SB2018051022 SB2018051023 and 7 more
#VU11490 - Use After Free CVE-2018-1000051	CWE-416	High	No	No	1.13.0-r0	03.04.2018	SB2018012921 SB2018032823 SB2018051013 and 8 more
#VU11489 - Improper input validation CVE-2018-6544	CWE-20	Low	No	No	1.13.0-r0	03.04.2018	SB2018012921 SB2018032823 SB2018051013 and 7 more
#VU33156 - Heap-based Buffer Overflow CVE-2017-17858	CWE-122	Medium	No	No	1.13.0-r0	22.01.2018	SB2018012213 SB2018051130 SB2018013041 and 6 more
#VU6922 - Stack-based buffer overflow CVE-2017-6060	CWE-121	Low	Available	No	1.10a-r3	06.06.2017	SB2017060605 SB2017060616 SB2017050316
#VU6921 - NULL Pointer Dereference CVE-2017-5991	CWE-476	Low	Available	No	1.10a-r2	06.06.2017	SB2017060605 SB2017060616 SB2017030904
#VU33157 - Heap-based Buffer Overflow CVE-2017-5896	CWE-122	Medium	No	No	1.10a-r1	15.02.2017	SB2017021511 SB2017021010 SB2017021904
#VU33603 - Heap-based Buffer Overflow CVE-2016-6525	CWE-122	High	No	No	1.9a-r4	22.09.2016	SB2016092233 SB2016090606 SB2017021904
#VU33602 - Use After Free CVE-2016-6265	CWE-416	Medium	No	No	1.9a-r4	22.09.2016	SB2016090605 SB2017021904 SB2017021203 and 1 more