https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:19:06 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-15297 bdu:2026-15297 https://cve.radiocsirt.org/vuln/bdu:2026-15297 https://cve.radiocsirt.org/vuln/euvd-2026-336770 EUVD-2026-336770 https://cve.radiocsirt.org/vuln/euvd-2026-336770 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40505 <p>MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata fields. Attackers can embed malicious ANSI escape codes in PDF metadata that are passed unsanitized to terminal output when running mutool info, enabling them to manipulate terminal display for social engineering attacks such as presenting fake prompts or spoofed commands.</p> <p>MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata fields. Attackers can embed malicious ANSI escape codes in PDF metadata that are passed unsanitized to terminal output when running mutool info, enabling them to manipulate terminal display for social engineering attacks such as presenting fake prompts or spoofed commands.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-40505 https://cve.radiocsirt.org/vuln/ghsa-hj44-m5xv-x75q <p>MuPDF mutool does not sanitize PDF metadata fields before writing them to terminal output, allowing attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata. Attackers can embed malicious ANSI escape codes in PDF metadata that are passed unsanitized to the terminal when running mutool info, enabling them to clear the terminal display and render arbitrary text for social engineering attacks such as presenting fake prompts or spoofed commands.</p> <p>MuPDF mutool does not sanitize PDF metadata fields before writing them to terminal output, allowing attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata. Attackers can embed malicious ANSI escape codes in PDF metadata that are passed unsanitized to the terminal when running mutool info, enabling them to clear the terminal display and render arbitrary text for social engineering attacks such as presenting fake prompts or spoofed commands.</p> https://cve.radiocsirt.org/vuln/ghsa-hj44-m5xv-x75q https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-40505 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: mupdf, Ubuntu:Pro:18.04:LTS: mupdf, Ubuntu:Pro:20.04:LTS: mupdf, Ubuntu:Pro:22.04:LTS: mupdf, Ubuntu:Pro:24.04:LTS: mupdf, Ubuntu:25.10: mupdf, Ubuntu:26.04:LTS: mupdf</p> <p>MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata fields. Attackers can embed malicious ANSI escape codes in PDF metadata that are passed unsanitized to terminal output when running mutool info, enabling them to manipulate terminal display for social engineering attacks such as presenting fake prompts or spoofed commands.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: mupdf, Ubuntu:Pro:18.04:LTS: mupdf, Ubuntu:Pro:20.04:LTS: mupdf, Ubuntu:Pro:22.04:LTS: mupdf, Ubuntu:Pro:24.04:LTS: mupdf, Ubuntu:25.10: mupdf, Ubuntu:26.04:LTS: mupdf</p> <p>MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata fields. Attackers can embed malicious ANSI escape codes in PDF metadata that are passed unsanitized to terminal output when running mutool info, enabling them to manipulate terminal display for social engineering attacks such as presenting fake prompts or spoofed commands.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-40505