PT-2021-20379 · Mupdf+3 · Mupdf+3

Denis Straghkov + 5 · Published 2021-02-23 · Updated 2025-10-16 · CVE-2021-3407

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: mupdf version 1.18.0

Description: A flaw was found in mupdf. Double free of object during linearization may lead to memory corruption and other potential consequences.

Recommendations: For mupdf version 1.18.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

ALT-PU-2024-17298

ALT-PU-2024-17458

ALT-PU-2025-1462

ALT-PU-2025-5278

CVE-2021-3407

DLA-2589-1

USN-7825-1

Affected Products

Alt Linux

Linuxmint

Ubuntu

Mupdf

References · 33

• https://osv.dev/vulnerability/UBUNTU-CVE-2021-3407 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-16647 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3407 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-3407 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2589-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-37220 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10289 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-3407 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-21896 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLC6MPH7YS6JPU427XOFRLF3KKZQUZJN · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3407 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-16648 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-3407 · Security Note
• https://ubuntu.com/security/notices/USN-7825-1 · Vendor Advisory
• https://security.gentoo.org/glsa/202105-30 · Vendor Advisory