CVE-2018-6187: Artifex Mupdf

Medium severity, CVSS 5.5. EPSS: 1.9% chance of exploitation in the next 30 days.

In Artifex MuPDF 1.12.0, there is a heap-based buffer overflow vulnerability in the do_pdf_save_document function in the pdf/pdf-write.c file. Remote attackers could leverage the vulnerability to cause a denial of service via a crafted pdf file.

Affected products

  • Artifex Mupdf: version 1.12.0 only
  • Debian Debian Linux: version 9.0 only

Published 2018-01-24. Last modified 2026-06-17.