artifex Vulnerability Advisory Catalog

Total 248 security vulnerabilities recorded for artifex software and firmware.

← Back to All Vendors
Component: mupdf

MuPDF before 1.27.0-rc1 contains an uncontrolled recursion vulnerability in the EPUB CSS rendering engine that allows remote attackers to cause a deni...

📅 2026-06-23
CVSS 6.5 Dossier →
Component: mupdf

A vulnerability was determined in Artifex MuPDF up to 1.28.0. The impacted element is the function fz_subset_cff_for_gids of the file subset-cff.c of ...

📅 2026-04-28
CVSS 3.3 Dossier →
Component: mupdf

MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers to inject arbitrary ANSI escape sequences through crafted P...

📅 2026-04-16
CVSS 3.3 Dossier →
Component: mupdf

MuPDF versions 1.23.0 through 1.27.0 contain a double-free vulnerability in fz_fill_pixmap_from_display_list() when an exception occurs during display...

📅 2026-02-06
CVSS 7.5 Dossier →
Component: mupdf

A null pointer dereference occurs in the function break_word_for_overflow_wrap() in MuPDF 1.26.4 when rendering a malformed EPUB document. Specificall...

📅 2025-09-23
CVSS 7.5 Dossier →
Component: ghostscript

In Artifex Ghostscript through 10.05.1, ocr_begin_page in devices/gdevpdfocr.c has an integer overflow that leads to a heap-based buffer overflow in o...

📅 2025-09-22
CVSS 4.3 Dossier →
Component: ghostscript

Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdfmark_coerce_dest in devices/vector/gdevpdfm.c via a large size value....

📅 2025-09-22
CVSS 4.3 Dossier →
Component: ghostscript

Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c....

📅 2025-09-22
CVSS 4.3 Dossier →
Component: mupdf

An issue in Artifex mupdf 1.25.6, 1.25.5 allows a remote attacker to cause a denial of service via an infinite recursion in the `mutool clean` utility...

📅 2025-08-04
CVSS 6.5 Dossier →
Component: ghostscript

gs_lib_ctx_stash_sanitized_arg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the # case. A created PDF docu...

📅 2025-05-23
CVSS 4.0 Dossier →
Component: ghostscript

In Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of an incompl...

📅 2025-04-26
CVSS 4.5 Dossier →
CVE-2025-27837 CRITICAL
Component: ghostscript

An issue was discovered in Artifex Ghostscript before 10.05.0. Access to arbitrary files can occur through a truncated path with invalid UTF-8 charact...

📅 2025-03-25
CVSS 9.8 Dossier →
CVE-2025-27836 CRITICAL
Component: ghostscript

An issue was discovered in Artifex Ghostscript before 10.05.0. The BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c....

📅 2025-03-25
CVSS 9.8 Dossier →
Component: ghostscript

An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c....

📅 2025-03-25
CVSS 7.8 Dossier →
Component: ghostscript

An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs via an oversized Type 4 function in a PDF document to pdf/pdf_...

📅 2025-03-25
CVSS 7.8 Dossier →
Component: ghostscript

An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs for a long TTF font name to pdf/pdf_fmap.c....

📅 2025-03-25
CVSS 7.8 Dossier →
CVE-2025-27832 CRITICAL
Component: ghostscript

An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c....

📅 2025-03-25
CVSS 9.8 Dossier →
CVE-2025-27831 CRITICAL
Component: ghostscript

An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices...

📅 2025-03-25
CVSS 9.8 Dossier →
Component: ghostscript

An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_...

📅 2025-03-25
CVSS 7.8 Dossier →
Component: mupdf

Artifex Software mupdf v1.24.9 was discovered to contain a segmentation fault via the component /tools/pdfextract.c. This vulnerability allows attacke...

📅 2024-12-10
CVSS 5.5 Dossier →
Component: ghostscript

An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforall can lead to arbitrary code e...

📅 2024-11-10
CVSS 7.8 Dossier →
Component: ghostscript

An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. There is an out-of-bounds read when reading color in Indexed color spac...

📅 2024-11-10
CVSS 5.5 Dossier →
Component: ghostscript

An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding leads to possible ../ director...

📅 2024-11-10
CVSS 7.8 Dossier →
Component: ghostscript

An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the...

📅 2024-11-10
CVSS 7.8 Dossier →
Page 1 of 11 (248 Total Records)