tocsin

Debian/mupdf: medium 5.5

Artifex MuPDF before 1.18.0 has a heap based buffer over-write in tiff_expand_colormap() function when parsing TIFF files allowing attackers to cause a denial of service.

Action: Upgrade mupdf to 1.17.0+ds1-2 or later.

Affected

introducedfixedlast affected
01.17.0+ds1-2-

Fixed versions

1.17.0+ds1-2

Sources

published · modified · JSON