CVE-2016-10247: Buffer overflow in the my_getline function in jstest_main.c in Mujstest in Artifex Software, Inc.

Security readout for executives and security teams

This is an old MuPDF issue where a crafted file could crash the Mujstest component by overflowing a buffer. Public sources describe denial of service, not data theft or code execution. The main concern is any environment still carrying MuPDF before 1.10 or running Mujstest on untrusted files. Exposure is most likely in legacy systems, packaged distributions, or build/test pipelines that include MuPDF before 1.10 and process attacker-supplied files. Production exposure is unclear because the issue is specifically described in Mujstest, not every MuPDF consumer. Handle as a legacy hygiene issue unless MuPDF or Mujstest processes external files in business-critical services. Absence from KEV and denial-of-service-only evidence lowers urgency, but unsupported legacy components should still be retired or isolated. Mitigation focus: Inventory MuPDF versions and identify any instances before 1.10.; Prioritize removal or upgrade of legacy MuPDF packages where available.; Review vendor or distribution advisories for supported fixed package versions..

Prepared

Jun 13, 2026, 06:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.