CVE-2019-13290

Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fz_append_display_node located at fitz/list-device.c, allowing remote attackers to execute arbitrary…

published July 4, 2019

CVSS
—
EPSS
3%
Percentile
87.4
In the wild
Unconfirmed
What it is

Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fz_append_display_node located at fitz/list-device.c, allowing remote attackers to execute arbitrary code via a crafted PDF file. This occurs with a large BDC property name that overflows the allocated size of a display list node.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03032 · 87.4th percentile
Published
2019-07-04T21:07Z
EPSS history
Timeline
  • 04 JUL 21:07Z
    Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fz_append_display_node located at fitz/list-device.c, allowing remote attackers to execute arbitrary…
    cvelistv5