CVE-2019-7321

CRITICAL 9.8CVE-2019-7321 · Published 13/06/2019 · updated 17/06/2026

In short

CVE-2019-7321 is a CRITICAL (CVSS 9.8) vulnerability affecting mupdf (artifex).
Chance of exploitation in the next 30 days (EPSS): 3.2%, higher than 88.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mupdf artifex	`= 1.14.0`	No fix yet

Description

Usage of an uninitialized variable in the function fz_load_jpeg in Artifex MuPDF 1.14 can result in a heap overflow vulnerability that allows an attacker to execute arbitrary code.

References

bugs.ghostscript.com/show_bug.cgi
cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit
ereisr00/bagofbugz · Patch

More vulnerabilities in mupdf

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

mupdf

artifex

= 1.14.0

No fix yet

More vulnerabilities in mupdf

See all →