{"id":"DEBIAN-CVE-2026-3308","details":"An integer overflow vulnerability in 'pdf-image.c' in Artifex's MuPDF version 1.27.0 allows an attacker to maliciously craft a PDF that can trigger an integer overflow within the 'pdf_load_image_imp' function. This allows a heap out-of-bounds write that could be exploited for arbitrary code execution.","modified":"2026-09-14T17:03:28.789993852Z","published":"2026-03-31T14:16:12.560Z","upstream":["CVE-2026-3308"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2026-3308"}],"affected":[{"package":{"name":"mupdf","ecosystem":"Debian:12","purl":"pkg:deb/debian/mupdf?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.1+ds2-1+deb12u1"}]}],"versions":["1.21.1+ds2-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-3308.json"}},{"package":{"name":"mupdf","ecosystem":"Debian:13","purl":"pkg:deb/debian/mupdf?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.1+ds1-6+deb13u1"}]}],"versions":["1.25.1+ds1-6"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-3308.json"}},{"package":{"name":"mupdf","ecosystem":"Debian:14","purl":"pkg:deb/debian/mupdf?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.27.0+ds1-4"}]}],"versions":["1.25.1+ds1-6","1.25.1+ds1-7","1.25.1+ds1-8","1.25.1+ds1-9","1.27.0+ds1-1","1.27.0+ds1-2","1.27.0+ds1-3"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-3308.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}