Low severity3.3NVD Advisory· Published Apr 28, 2026· Updated May 5, 2026
CVE-2026-7233
CVE-2026-7233
Description
A vulnerability was determined in Artifex MuPDF up to 1.28.0. The impacted element is the function fz_subset_cff_for_gids of the file subset-cff.c of the component CFF Index Handler. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through a bug report but has not responded yet.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
6- bugs.ghostscript.com/show_bug.cginvdExploitMitigationThird Party Advisory
- github.com/biniamf/pocs/tree/main/mupdf-cff-indexload-oobreadnvdExploit
- vuldb.com/submit/802590nvdExploitMitigationThird Party AdvisoryVDB Entry
- vuldb.com/vuln/359840nvdExploitMitigationThird Party AdvisoryVDB Entry
- artifex.comnvdProduct
- vuldb.com/vuln/359840/ctinvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.