CVE-2019-7321 - Usage of an uninitialized variable in the function fz_load_jpeg in Artifex MuPDF 1.14 can result in a heap overflow vulnerability that allows an attacker to execute arbitrary code

Back Back to CVE browser

CRITICAL

Usage of an uninitialized variable in the function fz_load_jpeg in Artifex MuPDF 1.14 can result in a heap overflow vulnerability that allows an attacker to execute arbitrary code

Published Jun 13, 2019

9.8

CRITICAL

CVSS 3.0

EPSS 3.21%

Description

Usage of an uninitialized variable in the function fz_load_jpeg in Artifex MuPDF 1.14 can result in a heap overflow vulnerability that allows an attacker to execute arbitrary code.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-787

Out-of-bounds Write

CWE-908

References (4)

Link	Providers	Tags
https://bugs.ghostscript.com/show_bug.cgi?id=700560
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=2be83b57e77938fddbb06bdffb11979ad89a9c7d
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-16864		Advisory
https://github.com/ereisr00/bagofbugz/tree/master/MuPDF/700560		PatchThird Party Advisory