Security Advisory

CVE-2016-8728

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-04-24 19:00:00
Last updated 2024-09-16 18:13:38
Assigner talos
CVSS score 8.6
State PUBLISHED

Description

An exploitable heap out of bounds write vulnerability exists in the Fitz graphical library part of the MuPDF renderer. A specially crafted PDF file can cause a out of bounds write resulting in heap metadata and sensitive process memory corruption leading to potential code execution. Victim needs to open the specially crafted file in a vulnerable reader in order to trigger this vulnerability.