Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-51107

A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in functon compute_color() of jquant2.c. NOTE: this is disputed by the supplier because there was not reasonable evidence to determine the existence of a vulnerability or identify the affected product.

Published

2023-12-26T15:15:08.807

Last Modified

2024-11-21T08:37:51.720

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses

Type: Primary
CWE-369
Type: Secondary
CWE-369

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	artifex	mupdf	1.23.4	Yes

References

https://github.com/dongyuma/sox-defects/blob/main/mupdf-defects.md Exploit, Third Party Advisory ([email protected])
https://github.com/dongyuma/sox-defects/blob/main/mupdf-defects.md Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)