Artifex MuPDF Integer Overflow Vulnerability in Image Processing Allows Arbitrary Code Execution

An integer overflow vulnerability has been identified in Artifex MuPDF version 1.27.0, specifically within the 'pdf-image.c' file. The issue arises in the 'pdf_load_image_imp' function, where an attacker can craft a malicious PDF that triggers the overflow. This vulnerability leads to a heap out-of-bounds write, which could be exploited for arbitrary code execution.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system.

Reproduction

The vulnerability can be reproduced by creating a PDF file that exploits the integer overflow in the 'pdf_load_image_imp' function of MuPDF version 1.27.0. This can be done by manipulating the image loading process to cause an overflow in the 'src_stride' calculation, leading to a heap out-of-bounds write.

Remediation

Users can update to the latest version of MuPDF, where this vulnerability has been addressed.