Buffer overflow in MuPDF - CVE-2024-46657

Vulnerability identifier: #VU101973

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-46657

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error when processing PDF files. A remote attacker can pass a specially crafted PDF file to the application, trigger memory corruption and perform a denial of service (DoS) attack.

MuPDF
Fedora
Ubuntu
Anolis OS
mupdf (Ubuntu package)
mupdf
mupdf-devel
mupdf-doc

Install updates from vendor's website.

MuPDF - update to 1.25.0 rc1
mupdf (Ubuntu package) - addressed in versions 1.12.0+ds1-1ubuntu0.1~esm2, 1.16.1+ds1-1ubuntu1+esm2, 1.19.0+ds1-2ubuntu0.1~esm1, 1.23.10+ds1-1ubuntu0.1~esm1, 1.25.1+ds1-5ubuntu0.1
mupdf - addressed in versions 1.21.1-6.el9, 1.24.6-2.fc40, 1.24.6-4.fc41
mupdf - update to 1.25.0-1
mupdf-devel - update to 1.25.0-1
mupdf-doc - update to 1.25.0-1

• https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/diff/?id=b5c898a30f068b5342e8263a2cd5b9f0be291aac
• https://gist.github.com/isumitpatel/615e6bd2621cb46b5d980ddb9db223e2
• https://github.com/ArtifexSoftware/mupdf/commit/b5c898a30f068b5342e8263a2cd5b9f0be291aac

• Denial of service in Artifex Software mupdf
• Fedora EPEL 9 update for mupdf
• Fedora 40 update for mupdf
• Fedora 41 update for mupdf
• Anolis OS update for mupdf
• Ubuntu update for mupdf