CVE-2023-31794: Medium severity artifex software mupdf vulnerability
Published Oct 31, 2023
·Updated
MuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdfmarklistpush. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.
Affected Software
1 affected component
Artifex Mupdf=1.21.1
Event History
Oct 31, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2023-31794?
CVE-2023-31794 is a vulnerability found in MuPDF version 1.21.1 that allows attackers to cause a Denial of Service (DoS) by exploiting an infinite recursion in the component pdf_mark_list_push.
2
How severe is CVE-2023-31794?
CVE-2023-31794 has a severity rating of medium with a score of 5.5.
3
How does CVE-2023-31794 affect Artifex Mupdf?
CVE-2023-31794 affects Artifex Mupdf version 1.21.1.
4
What is the Common Weakness Enumeration (CWE) for CVE-2023-31794?
The CWE for CVE-2023-31794 is CWE-674.
5
Is there a fix available for CVE-2023-31794?
At this time, there is no information available regarding a fix for CVE-2023-31794. It is recommended to update to a newer version if one becomes available.