Vulnerability Details CVE-2020-19609
Artifex MuPDF before 1.18.0 has a heap based buffer over-write in tiff_expand_colormap() function when parsing TIFF files allowing attackers to cause a denial of service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 62.6%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 4.3
Products affected by CVE-2020-19609
-
cpe:2.3:a:artifex:mupdf:0.6
-
cpe:2.3:a:artifex:mupdf:0.7
-
cpe:2.3:a:artifex:mupdf:0.8
-
cpe:2.3:a:artifex:mupdf:0.8.15
-
cpe:2.3:a:artifex:mupdf:0.8.165
-
cpe:2.3:a:artifex:mupdf:0.9
-
cpe:2.3:a:artifex:mupdf:0.9.1
-
cpe:2.3:a:artifex:mupdf:1.0
-
cpe:2.3:a:artifex:mupdf:1.1
-
cpe:2.3:a:artifex:mupdf:1.10
-
cpe:2.3:a:artifex:mupdf:1.10a
-
cpe:2.3:a:artifex:mupdf:1.11
-
cpe:2.3:a:artifex:mupdf:1.12
-
cpe:2.3:a:artifex:mupdf:1.12.0
-
cpe:2.3:a:artifex:mupdf:1.13
-
cpe:2.3:a:artifex:mupdf:1.13.0
-
cpe:2.3:a:artifex:mupdf:1.14.0
-
cpe:2.3:a:artifex:mupdf:1.15.0
-
cpe:2.3:a:artifex:mupdf:1.15.1
-
cpe:2.3:a:artifex:mupdf:1.15.2
-
cpe:2.3:a:artifex:mupdf:1.16.0
-
cpe:2.3:a:artifex:mupdf:1.16.1
-
cpe:2.3:a:artifex:mupdf:1.17.0
-
cpe:2.3:a:artifex:mupdf:1.2
-
cpe:2.3:a:artifex:mupdf:1.3
-
cpe:2.3:a:artifex:mupdf:1.4
-
cpe:2.3:a:artifex:mupdf:1.5
-
cpe:2.3:a:artifex:mupdf:1.6
-
cpe:2.3:a:artifex:mupdf:1.7
-
cpe:2.3:a:artifex:mupdf:1.7.1
-
cpe:2.3:a:artifex:mupdf:1.7a
-
cpe:2.3:a:artifex:mupdf:1.8
-
cpe:2.3:a:artifex:mupdf:1.8.1
-
cpe:2.3:a:artifex:mupdf:1.9
-
cpe:2.3:a:artifex:mupdf:1.9a
-
cpe:2.3:o:debian:debian_linux:9.0