CVE-2016-8729: Buffer Overflow

Published Apr 24, 2018

Updated

An exploitable memory corruption vulnerability exists in the JBIG2 parser of Artifex MuPDF 1.9. A specially crafted PDF can cause a negative number to be passed to a memset resulting in memory corruption and potential code execution. An attacker can specially craft a PDF and send to the victim to trigger this vulnerability.

Affected Software

1 affected component

Artifex Mupdf=1.9

Event History

Apr 24, 2018

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2016-8729?

CVE-2016-8729 is a memory corruption vulnerability in the JBIG2 parser of Artifex MuPDF 1.9.

How does CVE-2016-8729 work?

A specially crafted PDF can cause a negative number to be passed to a memset resulting in memory corruption and potential code execution.

What is the severity of CVE-2016-8729?

CVE-2016-8729 has a severity rating of 7.8 (high).

How can I fix CVE-2016-8729?

Apply the necessary updates or patches provided by Artifex Mupdf to fix CVE-2016-8729.

Where can I find more information about CVE-2016-8729?

You can find more information about CVE-2016-8729 at the following link: [https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0243](https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0243)