Threats affecting pkg:github/biniamf/pocs

A local out-of-bounds read vulnerability exists in Artifex MuPDF up to version 1.28.0 in the function fz_subset_cff_for_gids within the CFF Index Handler component. The flaw allows reading memory beyond intended bounds but does not impact integrity or availability. Exploit code has been publicly disclosed. No vendor response or patch is currently available.