Use-after-free vulnerability in the pdf_load_xref function in pdf/pdf-xref.c in MuPDF allows remote attackers to cause a denial of service (crash) via a crafted PDF file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade mupdf | Aug 27, 2016 | Aug 26, 2016 |
| Freebsd | — | Upgrade llppUpgrade mupdfUpgrade zathura-pdf-mupdf | Nov 14, 2016 | Oct 12, 2016 |
| Gentoo Linux | — | Upgrade app-text/mupdf. | Oct 30, 2017 | Sep 22, 2016 |
| Suse | — | Upgrade mupdfUpgrade mupdf-debugsourceUpgrade mupdf-devel-staticUpgrade mupdf-debuginfo | Aug 26, 2016 | Aug 1, 2016 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 22, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub