CVE-2026-112036: Artifex MuPDF Signature Locking pdf-xref.c free_char_list double free
A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function freecharlist of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be used. The patch is named 3984925b660afb8a781ddf504021e91be1bc671e. To fix this issue, it is recommended to deploy a patch.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Artifex MuPDFto a version that resolves this vulnerability.Patch 3984925b660afb8a781ddf504021e91be1bc671e
Event History
Frequently Asked Questions
Which installations should be prioritized for remediation?
Artifex MuPDF versions up to and including 1.28.5 are affected where the Signature Locking component is in use. The issue is in free_char_list in source/pdf/pdf-xref.c.
What does exploitation require?
The attack can be initiated remotely and requires user interaction. It does not require prior privileges, according to the supplied severity vector.
Is exploit code available?
Yes. The vulnerability information states that a public exploit exists and may be used.
What mitigation is identified if remediation is needed?
Deploy the patch identified as 3984925b660afb8a781ddf504021e91be1bc671e. No alternative workaround is provided in the available data.