CVE-2026-92413— Artifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_filter null pointer dereference
Quick assessment
Affected
Artifex MuPDF
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdf_open_filter of the file pdf-stream.c of the component PDF Xref Loading. Executing a manipulation can lead to null pointer
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-92413
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Artifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_filter null pointer dereference
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdf_open_filter of the file pdf-stream.c of the component PDF Xref Loading. Executing a manipulation can lead to null pointer dereference. The attack can be launched remotely. The exploit has been published and may be used. This patch is called 3df1e30f9d7b77260e13bd0dbe1928ddeba8386e. Applying a patch is advised to resolve this issue.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
空指针解引用
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-92413
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-92413
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-92413 (1)
Other References for CVE-2026-92413 (2)
-
Making sure you're not a bot! exploit
-
Making sure you're not a bot! issue-tracking
IV. Related Vulnerabilities
Same product: MuPDF
-
CVE-2025-71382
MuPDF < 1.27.0-rc1 Stack Exhaustion DoS via EPUB CSS Renderi -
CVE-2026-7233
Artifex MuPDF CFF Index subset-cff.c fz_subset_cff_for_gids -
CVE-2026-40505
MuPDF < 1.27 mutool ANSI Injection via Metadata -
CVE-2026-3308
CVE-2026-3308 -
CVE-2025-15569
Artifex MuPDF win_main.c get_system_dpi uncontrolled search
Same weakness: CWE-476
-
CVE-2026-92417
Open5GS PFCP types.c ogs_pfcp_parse_volume_measurement null -
CVE-2026-92626
Control iD iDSecure Unauthenticated Denial of Service -
CVE-2026-77692
Unauthenticated remote crash of named via a single DoH SIG(0 -
CVE-2026-76868
Netcore NR255-V 1.5.130703 NULL Pointer Dereference in route -
CVE-2026-76865
Netcore NR255-V 1.5.130703 NULL Pointer Dereference via Unch
V. Comments for CVE-2026-92413
No comments yet