CVE-2026-92413: NULL Pointer Dereference in Artifex MuPDF
A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdf_open_filter of the file pdf-stream.c of the component PDF Xref Loading. Executing a manipulation can lead to null pointer dereference. The attack can be launched remotely. The exploit has been published and may be used. This patch is called 3df1e30f9d7b77260e13bd0dbe1928ddeba8386e. Applying a patch is advised to resolve this issue.
AI Analysis
Technical Summary
This vulnerability in Artifex MuPDF up to commit b6d17493700c621c0e70036980a6ebd06d2202c9 involves a null pointer dereference in the pdf_open_filter function of the pdf-stream.c file, part of the PDF Xref Loading component. Remote attackers can trigger this flaw to cause a denial of service by crashing the application. The issue is addressed by a patch identified as commit 3df1e30f9d7b77260e13bd0dbe1928ddeba8386e. The CVSS 4.0 base score is 5.3, indicating medium severity with network attack vector, low complexity, no privileges required, and user interaction needed.
Potential Impact
Successful exploitation results in a null pointer dereference causing application crashes, leading to denial of service. There is no indication of code execution or data leakage. The vulnerability can be triggered remotely but requires user interaction.
Mitigation Recommendations
A patch is available and applying the patch identified by commit 3df1e30f9d7b77260e13bd0dbe1928ddeba8386e is advised to resolve this issue. No other mitigations are specified.
CVE-2026-92413: NULL Pointer Dereference in Artifex MuPDF
Description
A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdf_open_filter of the file pdf-stream.c of the component PDF Xref Loading. Executing a manipulation can lead to null pointer dereference. The attack can be launched remotely. The exploit has been published and may be used. This patch is called 3df1e30f9d7b77260e13bd0dbe1928ddeba8386e. Applying a patch is advised to resolve this issue.
CVSS v4.0
Score 5.3medium
Affected software
Artifex
MuPDF
cpe:2.3:a:artifex:mupdf:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in Artifex MuPDF up to commit b6d17493700c621c0e70036980a6ebd06d2202c9 involves a null pointer dereference in the pdf_open_filter function of the pdf-stream.c file, part of the PDF Xref Loading component. Remote attackers can trigger this flaw to cause a denial of service by crashing the application. The issue is addressed by a patch identified as commit 3df1e30f9d7b77260e13bd0dbe1928ddeba8386e. The CVSS 4.0 base score is 5.3, indicating medium severity with network attack vector, low complexity, no privileges required, and user interaction needed.
Potential Impact
Successful exploitation results in a null pointer dereference causing application crashes, leading to denial of service. There is no indication of code execution or data leakage. The vulnerability can be triggered remotely but requires user interaction.
Mitigation Recommendations
A patch is available and applying the patch identified by commit 3df1e30f9d7b77260e13bd0dbe1928ddeba8386e is advised to resolve this issue. No other mitigations are specified.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-09-16T09:32:58.686Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6aaad61e55bf5e2cf5f51405
Added to database: 09/16/2026, 17:47:10 UTC
Last enriched: 09/16/2026, 18:02:09 UTC
Last updated: 09/17/2026, 03:08:47 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.