In Artifex MuPDF 1.13.0, the pdfgetxrefentry function in pdf/pdf-xref.c allows remote attackers to cause a denial of service (segmentation fault in fzwrite_data in fitz/output.c) via a crafted pdf file.
{ "urgency": "not yet assigned" }