CVE-2016-10141: An integer overflow vulnerability was observed in the regemit function in regexp.c in Artifex Software, Inc.

Security readout for executives and security teams

CVE-2016-10141 is a memory-safety flaw in Artifex MuJS. A specially formed regular expression with nested repetition can trigger an integer overflow and buffer overflow condition. The public CVE text says successful exploitation can cause code execution or denial of service, so business risk depends on whether MuJS handles untrusted scripts or regular expressions. Exposure is most likely where MuJS is embedded in applications, document workflows, or services that evaluate JavaScript or regular expressions from untrusted input. The source bundle does not identify downstream products, package versions, or internet-facing deployment patterns. Prioritize this for environments where MuJS processes external content, because the stated impact includes code execution and denial of service. If MuJS is absent or only processes trusted internal input, urgency is lower but inventory should still be documented. Mitigation focus: Update MuJS to include commit fa3d30fd18c348bb4b1f3858fb860f4fcd4b2045 or later.; Check Artifex or downstream vendor guidance for packaged MuJS fixes.; Inventory applications that bundle MuJS rather than relying only on system packages..

Prepared

Jun 13, 2026, 12:51 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.