CVE-2020-21896

Summary

CVE-2020-21896 is a Use After Free vulnerability affecting Artifex Software MuPDF 1.16.0. This issue is located in the svg_dev_text_span_as_paths_defs function in source/fitz/svg-device.c. A maliciously crafted PDF file can trigger this vulnerability, potentially leading to a denial of service for remote attackers. By exploiting this flaw, an attacker can cause MuPDF to allocate memory unsafely, and later use that memory when it has already been freed. Consequently, the application may crash, leading to a denial of service.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.