CVE-2026-112036
A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function free_char_list of the file source/pdf/pdf-xref.c of th
CVSS
4.3
Medium
EPSS
0.3%
p26
KEV
—
Exploit Today
8
0-100
Published: Oct 19, 2026 · Last modified: Oct 19, 2026 · CWE-119 · CWE-415
Not enough EPSS history yet.
A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function free_char_list of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be used. The patch is named 3984925b660afb8a781ddf504021e91be1bc671e. To fix this issue, it is recommended to deploy a patch.
- www.ghostscript.comhttp://www.ghostscript.com/cgi-bin/findgit.cgi?3984925b660afb8a781ddf504021e91be1bc671e
- artifex.comhttps://artifex.com/
- bugs.ghostscript.comhttps://bugs.ghostscript.com/attachment.cgi?id=28609
- bugs.ghostscript.comhttps://bugs.ghostscript.com/show_bug.cgi?id=709768
- vuldb.comhttps://vuldb.com/cve/CVE-2026-112036
- vuldb.comhttps://vuldb.com/submit/1008495
- vuldb.comhttps://vuldb.com/vuln/421684
- vuldb.comhttps://vuldb.com/vuln/421684/cti
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1123736.5 MED—
——0A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.13hCVE-2025-556675.5 MED—
——0A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-masterallows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.16hCVE-2026-1121086.3 MED—
——0A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function GGUFBuffer::ReadString of the file third_party/gguf/gguf.cpp of the component String Parsing. This manipulation of the argument len causes buffer overflow. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.22hCVE-2026-1121076.3 MED—
——0A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this issue is the function SafeTensorItem::CreateBuffer of the file src/model.cpp of the component Safetensors Weight Loading. This manipulation of the argument data_offsets causes buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.22hCVE-2026-1120945.5 MED7.1%
——2A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxml_load_data of the file mxml-file.c. The manipulation leads to use after free. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.19hCVE-2026-1120736.3 MED14.1%
——4A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this vulnerability is the function matmul_transb of the file src/layer/matmul.cpp of the component MatMul. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.22h