CVE-2014-2013
NoneCVSS
—
EPSS
14.8%
Published
Mar 3, 2014
CISA due date
—
The record
Stack-based buffer overflow in the xps_parse_color function in xps/xps-common.c in MuPDF 1.3 and earlier allows remote attackers to execute arbitrary code via a large number of entries in the ContextColor value of the Fill attribute in a Path element.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | mupdf | 0 | 1.3-2 |
| Debian:12 | mupdf | 0 | 1.3-2 |
| Debian:13 | mupdf | 0 | 1.3-2 |
| Debian:7 | mupdf | 0 | 0.9-2+deb7u2 |
| Ubuntu:14.04:LTS | mupdf | 0 | 1.3-2 |
Related vulnerabilities
- CVE-2024-46657 Artifex Software mupdf v1.24.9 was discovered to contain a segmentation fault via the… Also affects mupdf
- CVE-2017-5991 An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. Also affects mupdf
- CVE-2026-112108 A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. CWE-119
- CVE-2026-112073 A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dc… CWE-119
- CVE-2026-90831 A vulnerability was detected in GNU Binutils 2.47. CWE-119
- CVE-2026-90804 A vulnerability was detected in GNU Binutils 2.47. CWE-119
- CVE-2026-90803 A security vulnerability has been detected in GNU Binutils 2.47. CWE-119
- CVE-2026-90801 A security flaw has been discovered in GNU Binutils 2.47. CWE-119