CVE-2016-10246: Buffer overflow in the main function in jstest_main.c in Mujstest in Artifex Software, Inc.

Security readout for executives and security teams

This CVE describes a crash condition in MuPDF before 1.10. A maliciously crafted file could trigger a buffer overflow in the Mujstest test component, causing denial of service. The source bundle does not show active exploitation or broader system compromise. Exposure is most likely where MuPDF before 1.10, or distro packages containing the vulnerable Mujstest component, process untrusted files. Risk is lower if Mujstest is not shipped, not reachable, or never used in file-processing workflows. Treat this as a targeted remediation item for systems handling untrusted documents. It is not KEV-listed and the known impact is denial of service, but document-processing paths are commonly exposed to external input. Mitigation focus: Upgrade MuPDF to 1.10 or later where feasible.; Apply vendor or distribution security updates for MuPDF packages.; Remove or restrict Mujstest if it is shipped but not operationally required..

Prepared

Jun 13, 2026, 06:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.