CVE-2026-112036 in MuPDF
Prediction
by VulDB Data Team • 10/18/2026
A vulnerability was detected in <a href="/product/artifex:mupdf">Artifex MuPDF up to 1.28.5</a>. This impacts the function <code>free_char_list</code> of the file <em>source/pdf/pdf-xref.c</em> of the component <em>Signature Locking</em>. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be used. The patch is named <em>3984925b660afb8a781ddf504021e91be1bc671e</em>. To fix this issue, it is recommended to deploy a patch.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.