Artifex MuPDF 1.14.0 has a SEGV in the function fz_load_page of the fitz/document.c file, as demonstrated by mutool. This is related to page-number mishandling in cbz/mucbz.c, cbz/muimg.c, and svg/svg-doc.c.
The product does not restrict or incorrectly restricts operations within the boundaries of a resource that is accessed using an index or pointer, such as memory or files.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mupdf | Artifex | 1.14.0 (including) | 1.14.0 (including) |
| Mupdf | Ubuntu | bionic | * |
| Mupdf | Ubuntu | cosmic | * |
| Mupdf | Ubuntu | esm-apps/bionic | * |
| Mupdf | Ubuntu | esm-apps/xenial | * |
| Mupdf | Ubuntu | trusty | * |
| Mupdf | Ubuntu | xenial | * |