CVE-2018-1000039: In Artifex MuPDF 1.12.0 and earlier, multiple heap use after free bugs in the PDF parser could allow an att...

Security readout for executives and security teams

MuPDF versions 1.12.0 and earlier have PDF parsing memory-safety flaws. A malicious PDF could make an affected viewer or service crash, expose memory, or potentially run attacker-controlled code. Business urgency depends on whether MuPDF processes untrusted PDFs in user-facing or automated workflows. Exposure is likely where Artifex MuPDF 1.12.0 or earlier is installed or embedded and processes PDFs from users, email, web uploads, or automated document pipelines. The provided affected-product metadata is incomplete, so verify by software inventory rather than product naming alone. Treat as a targeted remediation item, not an emergency internet-wide event. Prioritize systems that handle external PDFs or process documents automatically, because parser flaws can become high-impact when placed in exposed business workflows. Mitigation focus: Identify systems and applications using Artifex MuPDF 1.12.0 or earlier.; Upgrade MuPDF using Artifex or distribution vendor guidance.; Apply relevant Linux distribution security updates, including Gentoo GLSA guidance where applicable..

Prepared

May 25, 2026, 03:31 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.