CVE-2016-6265 in MuPDF

Summary

Use-after-free vulnerability in the pdf_load_xref function in pdf/pdf-xref.c in MuPDF allows remote attackers to cause a denial of service (crash) via a crafted PDF file.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservation: 07/21/2016
• Disclosure: 09/22/2016
• Moderation: VulDB entry created
• Entries: VDB-91885 (1)
• CPE: ready
• CWE: CWE-416 (Confirmed)
• CVSS: 5.5
• EPSS: 0.00498
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-6265
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-6265
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-6265/