CVE-2026-112036 | Artifex MuPDF up to 1.28.5 Signature Locking source/pdf/pdf-xref.c free_char_list double free (Bug 709768)

October 18, 2026 Yanac

A vulnerability has been found in Artifex MuPDF up to 1.28.5 and classified as problematic. This impacts the function free_char_list of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free.

This vulnerability was named CVE-2026-112036. The attack may be initiated remotely. In addition, an exploit is available.

To fix this issue, it is recommended to deploy a patch.VulDB Recent EntriesRead More