CVE-2020-16600

Published: Dec 9, 2020Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF library 1.17.0-rc1 and earlier when a valid page was followed by a page with invalid pixmap dimensions, causing bander - a static - to point to previously freed memory instead of a newband_writer.

Affected (2)

Products: Artifex: Mupdf

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Artifex Mupdf	Up to 1.16.1
Artifex Mupdf	Version 1.17.0 rc1

Related CWEs

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (4)

http://git.ghostscript.com/?p=mupdf.git%3Bh=96751b25462f83d6e16a9afaf8980b0c3f979c8b

Source: cve@mitre.org

https://bugs.ghostscript.com/show_bug.cgi?id=702253

Source: cve@mitre.org

Third Party Advisory

http://git.ghostscript.com/?p=mupdf.git%3Bh=96751b25462f83d6e16a9afaf8980b0c3f979c8b

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.ghostscript.com/show_bug.cgi?id=702253

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.