CVE-2017-17866: Artifex Mupdf
High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days.
pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted PDF document.
Affected products
Published 2017-12-27. Last modified 2026-06-17.