CVE-2026-112036

EUVD-2026-104029
A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function free_char_list of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be used. The patch is named 3984925b660afb8a781ddf504021e91be1bc671e. To fix this issue, it is recommended to deploy a patch.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulDBCNA
4.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 25.87%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
artifexmupdf
1.28.0
CNA
artifexmupdf
1.28.1
CNA
artifexmupdf
1.28.2
CNA
artifexmupdf
1.28.3
CNA
artifexmupdf
1.28.4
CNA
artifexmupdf
1.28.5
CNA
Debian logo
Debian Releases
Debian Product
Codename
mupdf
bookworm
vulnerable
bookworm (security)
vulnerable
forky
vulnerable
sid
vulnerable
trixie
vulnerable
trixie (security)
vulnerable
Common Weakness Enumeration
References
http://www.ghostscript.com/cgi-bin/findgit.cgi?3984925b660afb8a781ddf504021e91be1bc671e
https://artifex.com/
https://bugs.ghostscript.com/attachment.cgi?id=28609
https://bugs.ghostscript.com/show_bug.cgi?id=709768
https://vuldb.com/cve/CVE-2026-112036
https://vuldb.com/submit/1008495
https://vuldb.com/vuln/421684
https://vuldb.com/vuln/421684/cti