PT-2026-7260 · Artifex · Mupdf

Nmaochea · Publicado 2026-02-10 · Atualizado 2026-02-10 · CVE-2025-15569

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Artifex MuPDF versions up to 1.26.1

Description An issue exists in Artifex MuPDF up to version 1.26.1 on Windows. The get system dpi function within the platform/x11/win main.c file is susceptible to an uncontrolled search path manipulation. This requires local access to exploit and is considered to have high complexity with difficult exploitability.

Recommendations Upgrade to version 1.26.2 to resolve this issue.

Correção

LPE

Untrusted Search Path

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-426

CWE-427

Identificadores relacionados

CVE-2025-15569

Produtos afetados

Mupdf

Referências · 14

• https://vuldb.com/?id.344924 · Nota
• https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=ebb125334eb007d64e579204af3c264aadf2e244 · Correção
• https://cve.org/CVERecord?id=CVE-2025-15569 · Nota de Segurança
• https://artifex.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-15569 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-15569 · Aviso do Fabricante
• https://t.me/CVEtracker/44286 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2021171943253459148 · Publicação no Twitter
• https://casper.mupdf.com/downloads/archive/mupdf-1.26.2-windows.zip · Correção
• https://twitter.com/VulmonFeeds/status/2021262917295853862 · Publicação no Twitter
• https://t.me/cveNotify/151532 · Publicação no Telegram
• https://vuldb.com/?submit.750978 · Nota
• https://vuldb.com/?ctiid.344924 · Nota
• https://ubuntu.com/security/CVE-2025-15569 · Aviso do Fabricante