{"id":"CVE-2018-19882","state":"PUBLISHED","title":"In Artifex MuPDF 1.14.0, the svg_run_image function in svg/svg-run.c allows remote attackers to cause a denial of service (href_att NULL pointer dereference and application crash) ","description":"In Artifex MuPDF 1.14.0, the svg_run_image function in svg/svg-run.c allows remote attackers to cause a denial of service (href_att NULL pointer dereference and application crash) via a crafted svg file, as demonstrated by mupdf-gl.","publishedAt":"2018-12-06T00:00:00.000Z","updatedAt":"2024-09-12T16:44:07.268Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://bugs.ghostscript.com/show_bug.cgi?id=700342","https://github.com/TeamSeri0us/pocs/tree/master/mupdf/20181203","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SEK2EHVNREJ7XZMFF2MXRWKIF4IBHPNE/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CNJNEX5EW6YH5OARXXSSXW4HHC5PIBSY/","http://www.ghostscript.com/cgi-bin/findgit.cgi?a7f7d91cdff8d303c11d458fa8b802776f73c8cc"],"weaknesses":[],"ingestedAt":"2026-10-29T19:44:34.704Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/19xxx/CVE-2018-19882.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-19882","state":"PUBLISHED","datePublished":"2018-12-06T00:00:00.000Z","dateUpdated":"2024-09-12T16:44:07.268Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2018-12-05T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"In Artifex MuPDF 1.14.0, the svg_run_image function in svg/svg-run.c allows remote attackers to cause a denial of service (href_att NULL pointer dereference and application crash) via a crafted svg file, as demonstrated by mupdf-gl."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=700342"},{"url":"https://github.com/TeamSeri0us/pocs/tree/master/mupdf/20181203"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SEK2EHVNREJ7XZMFF2MXRWKIF4IBHPNE/","name":"FEDORA-2019-befe3bd225","tags":["vendor-advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CNJNEX5EW6YH5OARXXSSXW4HHC5PIBSY/","name":"FEDORA-2019-15af6a9a07","tags":["vendor-advisory"]},{"url":"http://www.ghostscript.com/cgi-bin/findgit.cgi?a7f7d91cdff8d303c11d458fa8b802776f73c8cc"}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateUpdated":"2024-09-12T16:44:07.268Z"},"datePublic":"2018-12-05T00:00:00.000Z"},"adp":[{"title":"CVE Program Container","references":[{"url":"https://bugs.ghostscript.com/show_bug.cgi?id=700342","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://github.com/TeamSeri0us/pocs/tree/master/mupdf/20181203","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SEK2EHVNREJ7XZMFF2MXRWKIF4IBHPNE/","name":"FEDORA-2019-befe3bd225","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CNJNEX5EW6YH5OARXXSSXW4HHC5PIBSY/","name":"FEDORA-2019-15af6a9a07","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T11:44:20.667Z"}}]}}}