CVE-2026-112036 Details
Description
A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function free_char_list of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be used. The patch is named 3984925b660afb8a781ddf504021e91be1bc671e. To fix this issue, it is recommended to deploy a patch.
A double free vulnerability has been identified in Artifex MuPDF versions through 1.28.5. The issue arises in the Signature Locking component, specifically within the 'free_char_list' function of 'source/pdf/pdf-xref.c'. This vulnerability can be exploited remotely, leading to a crash or potential denial-of-service condition in applications that handle PDF signing.
Users are advised to update to the patched version of MuPDF, which is available on the official MuPDF website.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 19, 2026CISA-ADP
Assessed Oct 19, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://artifex.com/ | [email protected] | Vendor |
| https://bugs.ghostscript.com/attachment.cgi?id=28609 | [email protected] | Broken LinkIssue TrackingVendor |
| https://bugs.ghostscript.com/show_bug.cgi?id=709768 | [email protected] | ExploitIssue TrackingTechnical AnalysisVendor |
| https://vuldb.com/cve/CVE-2026-112036 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/1008495 | [email protected] | Permission Required |
| https://vuldb.com/vuln/421684 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/vuln/421684/cti | [email protected] | AdvisoryPermission Required |
| http://www.ghostscript.com/cgi-bin/findgit.cgi?3984925b660afb8a781ddf504021e91be1bc671e | [email protected] | Broken LinkSource CodeVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-119 | Improper Restriction of Operations within the Bounds of a Memory Buffer | [email protected] |
| CWE-415 | Double Free | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Artifex MuPDF | <= 1.28.5 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 19, 2026 | CVE Modified | CISA-ADP |
| Oct 19, 2026 | New CVE Received | [email protected] |