cvedb.io
CVE-2017-5991
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2017-02-15T06:59:00.917 · Last modified 2026-06-17T01:21:34.813

Summary

An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdf_run_xobject function in pdf-op-run.c encounters a NULL pointer dereference during a Fitz fz_paint_pixmap_with_mask painting operation. Versions 1.11 and later are unaffected.

Affected products

artifex — mupdf

Does this affect you?

Add your gear to cvedb and we'll alert you only when artifex ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.