CVE-2026-7233
EUVD-2026-2600028.04.2026, 07:16
A vulnerability was determined in Artifex MuPDF up to 1.28.0. The impacted element is the function fz_subset_cff_for_gids of the file subset-cff.c of the component CFF Index Handler. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through a bug report but has not responded yet.Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| artifex | mupdf | 1.0 | CNA |
| artifex | mupdf | 1.1 | CNA |
| artifex | mupdf | 1.2 | CNA |
| artifex | mupdf | 1.3 | CNA |
| artifex | mupdf | 1.4 | CNA |
| artifex | mupdf | 1.5 | CNA |
| artifex | mupdf | 1.6 | CNA |
| artifex | mupdf | 1.7 | CNA |
| artifex | mupdf | 1.8 | CNA |
| artifex | mupdf | 1.9 | CNA |
| artifex | mupdf | 1.10 | CNA |
| artifex | mupdf | 1.11 | CNA |
| artifex | mupdf | 1.12 | CNA |
| artifex | mupdf | 1.13 | CNA |
| artifex | mupdf | 1.14 | CNA |
| artifex | mupdf | 1.15 | CNA |
| artifex | mupdf | 1.16 | CNA |
| artifex | mupdf | 1.17 | CNA |
| artifex | mupdf | 1.18 | CNA |
| artifex | mupdf | 1.19 | CNA |
| artifex | mupdf | 1.20 | CNA |
| artifex | mupdf | 1.21 | CNA |
| artifex | mupdf | 1.22 | CNA |
| artifex | mupdf | 1.23 | CNA |
| artifex | mupdf | 1.24 | CNA |
| artifex | mupdf | 1.25 | CNA |
| artifex | mupdf | 1.26 | CNA |
| artifex | mupdf | 1.27 | CNA |
| artifex | mupdf | 1.28.0 | CNA |
Debian Releases
Common Weakness Enumeration