Vulnerability Details CVE-2019-14975
Artifex MuPDF before 1.16.0 has a heap-based buffer over-read in fz_chartorune in fitz/string.c because pdf/pdf-op-filter.c does not check for a missing string.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 44.8%
CVSS Severity
CVSS v3 Score 7.1
CVSS v2 Score 5.8
Products affected by CVE-2019-14975
-
cpe:2.3:a:artifex:mupdf:0.6
-
cpe:2.3:a:artifex:mupdf:0.7
-
cpe:2.3:a:artifex:mupdf:0.8
-
cpe:2.3:a:artifex:mupdf:0.8.15
-
cpe:2.3:a:artifex:mupdf:0.8.165
-
cpe:2.3:a:artifex:mupdf:0.9
-
cpe:2.3:a:artifex:mupdf:0.9.1
-
cpe:2.3:a:artifex:mupdf:1.0
-
cpe:2.3:a:artifex:mupdf:1.1
-
cpe:2.3:a:artifex:mupdf:1.10
-
cpe:2.3:a:artifex:mupdf:1.10a
-
cpe:2.3:a:artifex:mupdf:1.11
-
cpe:2.3:a:artifex:mupdf:1.12
-
cpe:2.3:a:artifex:mupdf:1.12.0
-
cpe:2.3:a:artifex:mupdf:1.13
-
cpe:2.3:a:artifex:mupdf:1.13.0
-
cpe:2.3:a:artifex:mupdf:1.14.0
-
cpe:2.3:a:artifex:mupdf:1.15.0
-
cpe:2.3:a:artifex:mupdf:1.15.1
-
cpe:2.3:a:artifex:mupdf:1.15.2
-
cpe:2.3:a:artifex:mupdf:1.2
-
cpe:2.3:a:artifex:mupdf:1.3
-
cpe:2.3:a:artifex:mupdf:1.4
-
cpe:2.3:a:artifex:mupdf:1.5
-
cpe:2.3:a:artifex:mupdf:1.6
-
cpe:2.3:a:artifex:mupdf:1.7
-
cpe:2.3:a:artifex:mupdf:1.7.1
-
cpe:2.3:a:artifex:mupdf:1.7a
-
cpe:2.3:a:artifex:mupdf:1.8
-
cpe:2.3:a:artifex:mupdf:1.8.1
-
cpe:2.3:a:artifex:mupdf:1.9
-
cpe:2.3:a:artifex:mupdf:1.9a