Candidate: CVE-2020-16600
PublicDate: 2020-12-09 21:15:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16600
 https://bugs.ghostscript.com/show_bug.cgi?id=702253
 http://git.ghostscript.com/?p=mupdf.git;h=96751b25462f83d6e16a9afaf8980b0c3f979c8b
Description:
 A Use After Free vulnerability exists in Artifex Software, Inc. MuPDF
 library 1.17.0-rc1 and earlier when a valid page was followed by a page
 with invalid pixmap dimensions, causing bander - a static - to point to
 previously freed memory instead of a newband_writer.
Ubuntu-Description:
Notes:
Mitigation:
Bugs:
Priority: medium
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H [7.8 HIGH]


Patches_mupdf:
upstream_mupdf: released (1.17.0+ds1-1)
precise/esm_mupdf: DNE
trusty_mupdf: ignored (out of standard support)
trusty/esm_mupdf: DNE
xenial_mupdf: ignored (end of standard support, was needs-triage)
bionic_mupdf: needs-triage
focal_mupdf: needs-triage
groovy_mupdf: ignored (reached end-of-life)
hirsute_mupdf: not-affected (1.17.0+ds1-1.2)
impish_mupdf: not-affected (1.17.0+ds1-1.2)
jammy_mupdf: not-affected (1.17.0+ds1-1.2)
devel_mupdf: not-affected (1.17.0+ds1-1.2)