| Package | Affected versions | Patched versions |
|---|---|---|
| mupdf | = 1.12.0 |
pdf_load_obj_stm in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 could reference the object stream recursively and therefore run out of error stack, which allows remote attackers to cause a denial of service via a crafted PDF document.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free