CVE-2016-8728

An exploitable heap out of bounds write vulnerability exists in the Fitz graphical library part of the MuPDF renderer

High · published April 24, 2018

CVSS v3.0
8.6
EPSS
2%
Percentile
77.5
In the wild
Unconfirmed
What it is

An exploitable heap out of bounds write vulnerability exists in the Fitz graphical library part of the MuPDF renderer. A specially crafted PDF file can cause a out of bounds write resulting in heap metadata and sensitive process memory corruption leading to potential code execution. Victim needs to open the specially crafted file in a vulnerable reader in order to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
8.6 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01747 · 77.5th percentile
Published
2018-04-24T19:00Z
EPSS history
Timeline
  • 24 APR 19:00Z
    An exploitable heap out of bounds write vulnerability exists in the Fitz graphical library part of the MuPDF renderer
    cvelistv5