CVE-2012-5340: Artifex Mupdf

High severity, CVSS 7.8. EPSS: 5.7% chance of exploitation in the next 30 days.

SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file.

Affected products

• Artifex Mupdf: version 1.0 only; version 1.1 only
• Sumatrapdfreader Sumatrapdf: version 2.1.1 only

Published 2020-01-23. Last modified 2026-06-16.