The js_strtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent validation. Upstream bug: https://bugs.ghostscript.com/show_bug.cgi?id=698920 Upstream patch: http://git.ghostscript.com/?p=mujs.git;a=commit;h=25821e6d74fab5fcc200fe5e818362e03e114428
Created mupdf tracking bugs for this issue: Affects: fedora-all [bug 1539848]
Created mujs tracking bugs for this issue: Affects: fedora-all [bug 1539873]
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.