VULNERABILITY INTELLIGENCE

CVE-2017-17866

CVSS score7.8 HIGH

EPSS probability1.58%

CISA KEVNot currently listed

Published2017-12-27

Last modified2026-06-17

Description

pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted PDF document.