CVE-2018-18662 (NVD)

2018-10-26

There is an out-of-bounds read in fz_run_t3_glyph in fitz/font.c in Artifex MuPDF 1.14.0, as demonstrated by mutool.

Products Mupdf
Type Out-of-bounds Read (CWE-125)
First patch - None (likely due to unavailable code)
Links https://github.com/TeamSeri0us/pocs/tree/master/mupdf
http://www.securityfocus.com/bid/105755
https://bugs.ghostscript.com/show_bug.cgi?id=700043