CVE-2026-7233 — 脆弱性インテリジェンス

artifex — mupdf

公表日: 2026-04-28T06:00:18.874Z

CVSS

4.8

CISA KEV

未掲載（悪用がないことを意味しません）

情報源の原文（翻訳ではありません）

A vulnerability was determined in Artifex MuPDF. The impacted element is the function fz_subset_cff_for_gids of the file subset-cff.c of the component CFF Index Handler. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through a bug report but has not responded yet.

情報源

• CVE-2026-7233
• Product
• Exploit, Mitigation, Third Party Advisory
• Exploit
• Original advisory
• Exploit, Mitigation, Third Party Advisory, VDB Entry
• Exploit, Mitigation, Third Party Advisory, VDB Entry
• Permissions Required, VDB Entry
• CVE-2026-7233