CVE-2020-21896: Use After Free

Published Aug 22, 2023

Updated

A Use After Free vulnerability in svgdevtextspanaspathsdefs function in source/fitz/svg-device.c in Artifex Software MuPDF 1.16.0 allows remote attackers to cause a denial of service via opening of a crafted PDF file.

Affected Software

1 affected component

Artifex Mupdf=1.16.0

Remediation

Patch Available

https://bugs.ghostscript.com/show_bug.cgi?id=701294

Event History

Aug 22, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·07:16 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2020-21896?

CVE-2020-21896 is a Use After Free vulnerability in the svg_dev_text_span_as_paths_defs function in Artifex Software MuPDF 1.16.0.

How does CVE-2020-21896 affect Artifex Software MuPDF?

CVE-2020-21896 affects Artifex Software MuPDF 1.16.0 by allowing remote attackers to cause a denial of service through a crafted PDF file.

What is the severity of CVE-2020-21896?

CVE-2020-21896 has a severity rating of medium (5.5).

How can I fix CVE-2020-21896?

To fix CVE-2020-21896, it is recommended to update to a version of Artifex Software MuPDF that is not affected by the vulnerability.

Is there any additional information about CVE-2020-21896?

For more information about CVE-2020-21896, you can refer to the official bug report at: https://bugs.ghostscript.com/show_bug.cgi?id=701294