CVE-2026-7233 - Vulnerability Analysis

Overview

Artifex MuPDF <= 1.28.0 contains an out-of-bounds read caused by improper handling in fz_subset_cff_for_gids function in CFF Index Handler, letting local attackers read memory out-of-bounds, exploit requires local access.

Severity & Score

Impact

Local attackers can read out-of-bounds memory, potentially exposing sensitive information or causing application crashes.

Mitigation

Update to the latest version of Artifex MuPDF.

References

• https://bugs.ghostscript.com/show_bug.cgi?id=709328
• https://github.com/biniamf/pocs/tree/main/mupdf-cff-indexload-oobread
• https://vuldb.com/submit/802590
• https://vuldb.com/vuln/359840
• https://vuldb.com/vuln/359840/cti
• https://artifex.com/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner