CVE-2021-3407CWE-415

A flaw was found in mupdf 1.18.0

High · published February 23, 2021

Patch now

High probability of exploitation

CVSS calls it high at 7.8. It sits in the 98.9th percentile for exploit probability.

CVSS v3.1
7.8
EPSS
50%
Percentile
98.9
In the wild
Unconfirmed
What it is

A flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory corruption and other potential consequences.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.50234 · 98.9th percentile
Weakness
CWE-415 · Double Free
Published
2021-02-23T22:04Z
EPSS history
Timeline
  • 23 FEB 22:04Z
    A flaw was found in mupdf 1.18.0
    cvelistv5