CVE-2016-8728 - CVE House
Back to Database
Status published High CVE-2016-8728

An exploitable heap out of bounds write vulnerability exists in...

Vulnerability Description

An exploitable heap out of bounds write vulnerability exists in the Fitz graphical library part of the MuPDF renderer. A specially crafted PDF file can cause a out of bounds write resulting in heap metadata and sensitive process memory corruption leading to potential code execution. Victim needs to open the specially crafted file in a vulnerable reader in order to trigger this vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-8728

Credits & Attribution

No credits recorded in the NVD database.

References

More from Artifex Software Inc.

View All →
CVE-2016-8729
An exploitable memory corruption vulnerability exists in the JBIG2 parser...
High 7.5

Affected Vendor

Artifex Software Inc.

View all reports →

Affected Software

MuPDF
Vulnerable Versions:
1.10-rc1

Timeline

Official Publish: April 24th, 2018
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.