CVE-2016-10133: Heap-based buffer overflow in the js_stackoverflow function in jsrun.c in Artifex Software, Inc.

Security readout for executives and security teams

CVE-2016-10133 is a heap buffer overflow in MuJS, a lightweight JavaScript engine from Artifex. The public record says the impact is unspecified, so business risk depends on where MuJS is used or embedded and whether it processes untrusted JavaScript-like content. Exposure is most likely in systems using MuJS directly or applications that embed MuJS through vendor or distribution packages. The provided CVE data does not identify exact affected versions, CPEs, or downstream products, so inventory and vendor confirmation are required. Prioritize discovery over emergency response unless MuJS is internet-facing or processes untrusted content in critical workflows. There is no cited active exploitation, but heap memory corruption in an embedded parser can create hidden third-party exposure. Mitigation focus: Identify direct and embedded MuJS usage across applications, packages, containers, and appliances.; Apply relevant vendor or distribution updates, including Artifex MuJS or Fedora fixes where applicable.; If no update is available, follow current vendor guidance and reduce MuJS exposure to untrusted input..

Prepared

Jun 13, 2026, 05:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.