Vulnerability Details CVE-2020-16600
A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newband_writer.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.0%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 6.8
Products affected by CVE-2020-16600
-
cpe:2.3:a:artifex:mupdf:0.6
-
cpe:2.3:a:artifex:mupdf:0.7
-
cpe:2.3:a:artifex:mupdf:0.8
-
cpe:2.3:a:artifex:mupdf:0.8.15
-
cpe:2.3:a:artifex:mupdf:0.8.165
-
cpe:2.3:a:artifex:mupdf:0.9
-
cpe:2.3:a:artifex:mupdf:0.9.1
-
cpe:2.3:a:artifex:mupdf:1.0
-
cpe:2.3:a:artifex:mupdf:1.1
-
cpe:2.3:a:artifex:mupdf:1.10
-
cpe:2.3:a:artifex:mupdf:1.10a
-
cpe:2.3:a:artifex:mupdf:1.11
-
cpe:2.3:a:artifex:mupdf:1.12
-
cpe:2.3:a:artifex:mupdf:1.12.0
-
cpe:2.3:a:artifex:mupdf:1.13
-
cpe:2.3:a:artifex:mupdf:1.13.0
-
cpe:2.3:a:artifex:mupdf:1.14.0
-
cpe:2.3:a:artifex:mupdf:1.15.0
-
cpe:2.3:a:artifex:mupdf:1.15.1
-
cpe:2.3:a:artifex:mupdf:1.15.2
-
cpe:2.3:a:artifex:mupdf:1.16.0
-
cpe:2.3:a:artifex:mupdf:1.16.1
-
cpe:2.3:a:artifex:mupdf:1.17.0
-
cpe:2.3:a:artifex:mupdf:1.2
-
cpe:2.3:a:artifex:mupdf:1.3
-
cpe:2.3:a:artifex:mupdf:1.4
-
cpe:2.3:a:artifex:mupdf:1.5
-
cpe:2.3:a:artifex:mupdf:1.6
-
cpe:2.3:a:artifex:mupdf:1.7
-
cpe:2.3:a:artifex:mupdf:1.7.1
-
cpe:2.3:a:artifex:mupdf:1.7a
-
cpe:2.3:a:artifex:mupdf:1.8
-
cpe:2.3:a:artifex:mupdf:1.8.1
-
cpe:2.3:a:artifex:mupdf:1.9
-
cpe:2.3:a:artifex:mupdf:1.9a