Bug 1770201 (CVE-2019-14975) - CVE-2019-14975 mupdf: a heap-based buffer over-read in fz_chartorune in fitz/string.c could lead to Information Disclosure and/or DoS
Summary: CVE-2019-14975 mupdf: a heap-based buffer over-read in fz_chartorune in fitz/...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: CVE-2019-14975
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1770202 1770203
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-11-08 13:26 UTC by Marian Rehak
Modified: 2020-02-05 10:30 UTC (History)
1 user (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2020-02-05 10:30:26 UTC
Embargoed:

Attachments (Terms of Use)

Description Marian Rehak 2019-11-08 13:26:23 UTC 
Artifex MuPDF before 1.16.0 has a heap-based buffer over-read in fz_chartorune in fitz/string.c because pdf/pdf-op-filter.c does not check for a missing string.

Upstream patch:

http://git.ghostscript.com/?p=mupdf.git;a=commit;h=97096297d409ec6f206298444ba00719607e8ba8
Comment 1 Marian Rehak 2019-11-08 13:26:40 UTC 
Created mupdf tracking bugs for this issue:

Affects: fedora-29 [bug 1770202]
Affects: fedora-30 [bug 1770203]
Note You need to log in before you can comment on or make changes to this bug.