CVE-2026-112036— Artifex MuPDF Signature Locking pdf-xref.c free_char_list double free
Quick assessment
Affected
Artifex MuPDF
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Artifex MuPDF 1.28.5 及更早版本中发现了一个漏洞。该漏洞影响组件“签名锁定”中文件 source/pdf/pdf-xref.c 的 free_char_list 函数。通过恶意操作可触发双重释放（double free）问题。攻击者可远程发起攻击。该漏洞的利用代码已公开并可被利用。修复补丁的提交哈希为 3984925b660afb8a781ddf504021e91be1bc671e。建议部署该补丁以修复此问题。
Possible ATT&CK Techniques 3 AI
T1203 · Exploitation for Client Execution T1068 · Exploitation for Privilege Escalation T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-112036
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Artifex MuPDF Signature Locking pdf-xref.c free_char_list double free
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function free_char_list of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be used. The patch is named 3984925b660afb8a781ddf504021e91be1bc671e. To fix this issue, it is recommended to deploy a patch.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
双重释放
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-112036
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-112036
请登录查看更多情报信息。
Vendor Pages for CVE-2026-112036 (1)
-
🔗 Making sure you're not a bot! issue-tracking
Other References for CVE-2026-112036 (1)
-
🔗 Making sure you're not a bot! exploit
Other References for CVE-2026-112036 (1)
IV. Related Vulnerabilities
Same product: MuPDF
-
CVE-2026-92413
Artifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_filter -
CVE-2025-71382
MuPDF < 1.27.0-rc1 Stack Exhaustion DoS via EPUB CSS Renderi -
CVE-2026-7233
Artifex MuPDF CFF Index subset-cff.c fz_subset_cff_for_gids -
CVE-2026-40505
MuPDF < 1.27 mutool ANSI Injection via Metadata -
CVE-2026-3308
CVE-2026-3308
Same vendor: Artifex
-
CVE-2026-103226
Artifex Ghostscript Pdfwrite gdevpsfx.c type1_callsubr stack -
CVE-2026-92413
Artifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_filter -
CVE-2026-7233
Artifex MuPDF CFF Index subset-cff.c fz_subset_cff_for_gids -
CVE-2025-15569
Artifex MuPDF win_main.c get_system_dpi uncontrolled search -
CVE-2025-59798
Artifex Ghostscript 安全漏洞
Same weakness: CWE-415
-
CVE-2026-57446
libIEC61850: Server-side double free in MMS ObtainFile task -
CVE-2026-110599
L-SMASH through 2.14.5 Double Free in HEVC and H.264 Importe -
CVE-2026-94370
Memory corruption (double free / use-after-free) vulnerabili -
CVE-2026-95635
Photoshop Desktop | Double Free (CWE-415) -
CVE-2026-108132
Windows Kerberos Elevation of Privilege Vulnerability
V. Comments for CVE-2026-112036
No comments yet