Known vulnerabilities in MuPDF

Vendor: Artifex Software, Inc.
Software: MuPDF
Software CPE: cpe:2.3:a:artifex_software:mupdf:*:*:*:*:*:*:*:*
Website: https://artifex.com
Total vulnerabilities: 38
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MuPDF MuPDF is affected by 38 known vulnerabilities: 10 high, 15 medium, 13 low Critical High Medium Low

Vulnerabilities (38)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118776 - NULL Pointer Dereference
CVE-2025-55780		 CWE-476 Low
No
No
 - 26.11.2025 SB2025112631
SB2025112642
SB2025112643
and 3 more
#VU118775 - Uncontrolled Recursion
CVE-2025-46206		 CWE-674 Low
No
No
 1.26.0 26.11.2025 SB2025112630
SB2025112634
SB2025112640
and 1 more
#VU118774 - Uncontrolled Recursion
CVE-2023-31794		 CWE-674 Low
No
No
 - 26.11.2025 SB20231031123
#VU118773 - Divide By Zero
CVE-2023-51107		 CWE-369 Low
No
No
 - 26.11.2025 SB2023122638
SB2025112629
SB2024111365
#VU118772 - Divide By Zero
CVE-2023-51106		 CWE-369 Low
No
No
 - 26.11.2025 SB2023122638
SB2025112629
SB2025112634
#VU118771 - Divide By Zero
CVE-2023-51105		 CWE-369 Low
No
No
 - 26.11.2025 SB2023122638
SB2025112634
SB2024111366
#VU118770 - Divide By Zero
CVE-2023-51104		 CWE-369 Low
No
No
 - 26.11.2025 SB2023122638
SB2025112634
SB2024111366
#VU118769 - Divide By Zero
CVE-2023-51103		 CWE-369 Low
No
No
 - 26.11.2025 SB2023122638
SB2025112634
SB2024111366
#VU117353 - Use After Free
CVE-2020-21896		 CWE-416 High
No
No
 - 17.10.2025 SB2023082255
SB2025101754
#VU117352 - Missing release of memory after effective lifetime
CVE-2020-26683		 CWE-401 Medium
No
No
 1.18.0 17.10.2025 SB2023082254
SB2025101754
#VU101973 - Memory corruption
CVE-2024-46657		 CWE-119 Medium
No
No
 1.25.0 rc1 27.12.2024 SB2024122792
SB2024122795
SB2024122796
and 3 more
#VU55403 - Out-of-bounds write
CVE-2021-37220		 CWE-787 High
No
No
 - 28.07.2021 SB2021072809
SB2021102634
SB2025101754
#VU53600 - Double Free
CVE-2021-3407		 CWE-415 High
No
No
 - 26.05.2021 SB2021052637
SB2021052638
SB2021022548
and 3 more
#VU47952 - Out-of-bounds write
CVE-2020-26519		 CWE-787 Medium
No
No
 1.18.0 02.10.2020 SB2020100223
SB2020102818
SB2020112305
and 3 more
#VU31879 - Heap-based Buffer Overflow
CVE-2019-13290		 CWE-122 High
No
No
 1.16.0 26.07.2020 SB2019070508
SB2020083122
SB2019110208
#VU35636 - Out-of-bounds read
CVE-2019-14975		 CWE-125 Medium
No
No
 1.16.0 14.08.2019 SB2019081441
#VU35831 - NULL Pointer Dereference
CVE-2019-7321		 CWE-476 High
No
No
 - 13.06.2019 SB2018120615
#VU36244 - Resource Management Errors
CVE-2019-6131		 CWE-399 Medium
No
No
 - 11.01.2019 SB2018120615
SB2019051333
SB2019051565
#VU36338 - Resource exhaustion
CVE-2018-19881		 CWE-400 Medium
No
No
 - 06.12.2018 SB2018120615
SB2019051333
SB2019051565
#VU36339 - NULL Pointer Dereference
CVE-2018-19882		 CWE-476 Medium
No
No
 - 06.12.2018 SB2018120615
SB2019051333
SB2019051565


Showing elements 1 - 20 out of 38