Log in Start free

Vulnerability · Published Oct 19, 2026 · Assigned by VulDB

CVE-2026-112036Artifex MuPDF Signature Locking pdf-xref.c free_char_list double free

Medium 4.3

In plain English

A medium-severity double free in MuPDF from Artifex. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities).

Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.3%top 73.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function free_char_list of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be used. The patch is named 3984925b660afb8a781ddf504021e91be1bc671e. To fix this issue, it is recommended to deploy a patch.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12mupdfno fix listedDEBIAN-CVE-2026-112036
Debian:13mupdfno fix listedDEBIAN-CVE-2026-112036
Debian:14mupdfno fix listedDEBIAN-CVE-2026-112036
Ubuntu:26.04:LTSmupdfno fix listedUBUNTU-CVE-2026-112036
Ubuntu:26.10mupdfno fix listedUBUNTU-CVE-2026-112036

Affected products (as reported)

VendorProductVersions
Artifex MuPDF 1.28.01.28.11.28.21.28.31.28.41.28.5

Weakness: CWE-415, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

References