Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2023-51104 Details

Description

A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function pnm_binary_read_image() of load-pnm.c when span equals zero.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CNA: CISA-ADPCVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
http://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=0c06a4e51519515615f6ab2d5b1f25da6771e1f4 CVE
https://bugs.ghostscript.com/show_bug.cgi?id=707621 CVE
https://github.com/dongyuma/sox-defects/blob/main/mupdf-defects.md CVEExploitThird Party Advisory
http://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=0c06a4e51519515615f6ab2d5b1f25da6771e1f4 [email protected]
https://bugs.ghostscript.com/show_bug.cgi?id=707621 [email protected]

see all 6 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-369Divide By Zero[email protected]

Affected Products

ProductVersions
artifex mupdf
1.23.4

CPE

  • cpe:2.3:a:artifex:mupdf:1.23.4:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

11 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2023-51104
NVD Published Date:
Dec 26, 2023
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2023-51104 Details - Not Deferred