{"id":"CVE-2019-14975","details":"Artifex MuPDF before 1.16.0 has a heap-based buffer over-read in fz_chartorune in fitz/string.c because pdf/pdf-op-filter.c does not check for a missing string.","modified":"2026-08-07T14:50:01.707073Z","published":"2019-08-14T13:15:11.127Z","references":[{"type":"WEB","url":"http://git.ghostscript.com/?p=mupdf.git%3Ba=commit%3Bh=97096297d409ec6f206298444ba00719607e8ba8"},{"type":"EVIDENCE","url":"https://bugs.ghostscript.com/show_bug.cgi?id=701292"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/artifexsoftware/mupdf","events":[{"introduced":"0"},{"fixed":"97096297d409ec6f206298444ba00719607e8ba8"}],"database_specific":{"cpe":"cpe:2.3:a:artifex:mupdf:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"1.16.0"}],"source":"CPE_RANGE"}}],"versions":["1.16.0-rc1","1.15.0-rc1","1.15.0","1.14.0","1.14.0-rc1","1.13.0-rc1","1.13.0","1.12.0","1.11.1","1.11","1.11-rc1","1.10","1.10-rc2","1.10-rc1","1.9a","1.9","1.9-rc2","1.9-rc1","1.8","1.7a","1.7","1.7-rc1","1.6-appstore","1.6-ios-rc2","1.6-ios-rc1","android-release-60","1.6","1.5-ios-rc8","1.5-ios-appstore","1.5-ios-rc7","1.5-ios-rc6","1.5-ios","1.5","1.4-ios","1.4","1.3rc1","1.2","1.1-forms-tech-preview","1.0","1.0rc1","0.9","0.8","0.7","0.6","0.5","0.4","0.3","0.2","0.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-14975.json","vanir_signatures_modified":"2026-08-07T14:50:01Z","vanir_signatures":[{"target":{"file":"source/pdf/pdf-op-filter.c","function":"walk_string"},"deprecated":false,"digest":{"function_hash":"22132210666855297300176127861558687407","length":526},"id":"CVE-2019-14975-33736a38","signature_type":"Function","signature_version":"v1","source":"https://github.com/artifexsoftware/mupdf/commit/97096297d409ec6f206298444ba00719607e8ba8"},{"signature_version":"v1","source":"https://github.com/artifexsoftware/mupdf/commit/97096297d409ec6f206298444ba00719607e8ba8","target":{"file":"source/pdf/pdf-op-filter.c","function":"pdf_filter_BDC"},"deprecated":false,"digest":{"function_hash":"141360480732212080125857994768008432067","length":1071},"id":"CVE-2019-14975-88e35d90","signature_type":"Function"},{"digest":{"threshold":0.9,"line_hashes":["336948674945074745165323003803061038331","228337066716575288865050937022077940283","221656355058970566685508219425163779943","96870174159668763310029628934872690651","132260105859989465243209083360715307007","156523484220526223878434138564142152064","237780298518384655629887639151886969117","225615008956946599777289946369504370065","153032065490437228956521532626920716668","146418026606449473965403155346357245718","173211069242037704485409803972333275309","4033915920651572327456290482267201087","276850222891534954924501491169626045829","279798060542120627889388004407248540488","51614699048720659976661558639751357501","140943939192747534559147218900914908563","20403510788494967940778370452567685346","236282834812402812549301621475385993094","244787211655720358352757263539100059404","103858003738723191802654080744488764322","99904283467154005579812588181627296100","247480876744661099795709733178890625665","205501670981160718848552754477434809912"]},"id":"CVE-2019-14975-fc6a829e","signature_type":"Line","signature_version":"v1","source":"https://github.com/artifexsoftware/mupdf/commit/97096297d409ec6f206298444ba00719607e8ba8","target":{"file":"source/pdf/pdf-op-filter.c"},"deprecated":false}]}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H"}]}