CVE-2017-14687: Artifex Mupdf

High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at mupdf+0x000000000016cb4f" on Windows. This occurs because of mishandling of XML tag name comparisons.

Affected products

• Artifex Mupdf: version 1.11 only

Published 2017-09-22. Last modified 2026-06-17.