| Package | Affected versions | Patched versions |
|---|---|---|
| mupdf | < 1.16.0 | 1.16.0 |
Artifex MuPDF before 1.16.0 has a heap-based buffer over-read in fz_chartorune in fitz/string.c because pdf/pdf-op-filter.c does not check for a missing string.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free