https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T16:56:18.775503+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-15407 bdu:2026-15407 2026-10-14T16:56:18.778526+00:00 bdu:2026-15407 https://cve.radiocsirt.org/vuln/euvd-2026-308647 EUVD-2026-308647 2026-10-14T16:56:18.778556+00:00 EUVD-2026-308647 https://cve.radiocsirt.org/vuln/fkie_cve-2026-7233 fkie_cve-2026-7233 2026-10-14T16:56:18.778571+00:00

A vulnerability was determined in Artifex MuPDF up to 1.28.0. The impacted element is the function fz_subset_cff_for_gids of the file subset-cff.c of the component CFF Index Handler. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through a bug report but has not responded yet.

 https://cve.radiocsirt.org/vuln/ghsa-82r2-3cm6-cxw2 GHSA-82r2-3cm6-cxw2 2026-10-14T16:56:18.778600+00:00

A vulnerability was determined in Artifex MuPDF up to 1.28.0. The impacted element is the function fz_subset_cff_for_gids of the file subset-cff.c of the component CFF Index Handler. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through a bug report but has not responded yet.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-7233 UBUNTU-CVE-2026-7233 2026-10-14T16:56:18.778617+00:00

Affected: Ubuntu:Pro:16.04:LTS: mupdf, Ubuntu:Pro:18.04:LTS: mupdf, Ubuntu:Pro:20.04:LTS: mupdf, Ubuntu:Pro:22.04:LTS: mupdf, Ubuntu:Pro:24.04:LTS: mupdf, Ubuntu:25.10: mupdf, Ubuntu:26.04:LTS: mupdf

A vulnerability was determined in Artifex MuPDF up to 1.28.0. The impacted element is the function fz_subset_cff_for_gids of the file subset-cff.c of the component CFF Index Handler. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through a bug report but has not responded yet.