CVE-2026-7233 — Vulnerability intelligence

artifex — mupdf

Published: 2026-04-28T06:00:18.874Z

CVSS

4.8

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

A vulnerability was determined in Artifex MuPDF. The impacted element is the function fz_subset_cff_for_gids of the file subset-cff.c of the component CFF Index Handler. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through a bug report but has not responded yet.

Sources

• CVE-2026-7233
• Product
• Exploit, Mitigation, Third Party Advisory
• Exploit
• Original advisory
• Exploit, Mitigation, Third Party Advisory, VDB Entry
• Exploit, Mitigation, Third Party Advisory, VDB Entry
• Permissions Required, VDB Entry
• CVE-2026-7233