Skip to main content

Artifex MuPDF CVE-2026-92413

| EUVDEUVD-2026-80896 LOW
NULL Pointer Dereference (CWE-476)
2026-09-16 VulDB GHSA-pxvr-c538-2crq
Denial Of Service Null Pointer Dereference Mupdf Artifex
2.1
CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY
2.1 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
4.3 MEDIUM

Crafted PDF must be opened/processed (UI:R), no auth needed (PR:N); NULL deref only crashes the process, so C:N/I:N and A:L, scope unchanged.

3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
4.0 AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
P
Scope
X

Lifecycle Timeline

4
Severity Changed
Sep 16, 2026 - 18:22 NVD
MEDIUM LOW
CVSS changed
Sep 16, 2026 - 18:22 NVD
5.3 (MEDIUM) 2.1 (LOW)
Analysis Generated
Sep 16, 2026 - 18:08 vuln.today
CVE Published
Sep 16, 2026 - 17:30 cve.org
MEDIUM 5.3

DescriptionCVE.org

A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdf_open_filter of the file pdf-stream.c of the component PDF Xref Loading. Executing a manipulation can lead to null pointer dereference. The attack can be launched remotely. The exploit has been published and may be used. This patch is called 3df1e30f9d7b77260e13bd0dbe1928ddeba8386e. Applying a patch is advised to resolve this issue.

AnalysisAI

Null pointer dereference in Artifex MuPDF allows a crafted PDF to crash the process that parses it, affecting builds up to commit b6d17493700c621c0e70036980a6ebd06d2202c9. The flaw sits in pdf_open_filter() in pdf-stream.c and is triggered while loading a malformed cross-reference (Xref) structure, so exploitation requires the target application (or automated ingestion pipeline) to process an attacker-supplied PDF - the assessed vector reflects passive user interaction (UI:P) with no confidentiality or integrity impact and only low availability loss. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires the victim to open or process an attacker-crafted PDF containing a malformed cross-reference (Xref) structure using an application built on the Artifex MuPDF library; this maps to UI:P - passive user interaction is required, and there is no exposed network service that can be hit unauthenticated without a file being supplied. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment This is a genuinely low-priority issue despite a moderate 5.3 CVSS 4.0 score. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Apply the upstream fix commit 3df1e30f9d7b77260e13bd0dbe1928ddeba8386e (https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=3df1e30f9d7b77260e13bd0dbe1928ddeba8386e), which is the patch referenced by the vendor and by VulDB; note that this is an upstream fix commit rather than a confirmed tagged release, so a released patched version is not independently confirmed in the supplied data - rebuild MuPDF from patched source or track the next vendor release containing this commit if you consume a distribution package, and verify which MuPDF revision any third-party library or service bundles before assuming it is fixed. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Mupdf

View all
CVE-2014-2013 HIGH POC
7.5 Mar 03

Stack-based buffer overflow in the xps_parse_color function in xps/xps-common.c in MuPDF 1.3 and earlier allows remote a
CVE-2017-5991 HIGH POC
7.5 Feb 15

An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. Rated high severity (CVSS 7.5)
CVE-2017-6060 HIGH POC
7.8 Mar 15

Stack-based buffer overflow in jstest_main.c in mujstest in Artifex Software, Inc. Rated high severity (CVSS 7.8), this

CVE-2017-14686 HIGH POC
7.8 Sep 22

Artifex MuPDF 1.11 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, rela
CVE-2017-14687 HIGH POC
7.8 Sep 22

Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted
CVE-2017-14685 HIGH POC
7.8 Sep 22

Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted
CVE-2019-13290 HIGH POC
7.8 Jul 04

Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fz_append_display_node located at fitz/list-device.c, allowing

CVE-2018-1000038 HIGH POC
7.8 May 24

In Artifex MuPDF 1.12.0 and earlier, a stack buffer overflow in function pdf_lookup_cmap_full in pdf/pdf-cmap.c could al
CVE-2018-1000051 HIGH POC
7.8 Feb 09

Artifex Mupdf version 1.12.0 contains a Use After Free vulnerability in fz_keep_key_storable that can result in DOS / Po
CVE-2024-24259 HIGH POC
7.5 Feb 05

freeglut through 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddMenuEntry functi
CVE-2024-24258 HIGH POC
7.5 Feb 05

freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function. Rated

CVE-2023-51107 HIGH POC
7.5 Dec 26

A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in functon compute_colo

Same weakness CWE-476 – NULL Pointer Dereference

View all
CVE-2016-0742 HIGH
7.5
CVE-2014-3470 MEDIUM
4.3
CVE-2017-3730 HIGH POC
7.5
CVE-2017-3169 CRITICAL POC
9.8
CVE-2016-4957 HIGH
7.5
CVE-2015-3194 HIGH
7.5
CVE-2026-21525 MEDIUM
6.2
CVE-2017-0016 MEDIUM
5.9

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

CVE-2026-92413 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy