Launchpad.net

CVE 2018-1000037

In MuPDF 1.12.0 and earlier, multiple reachable assertions in the PDF parser allow an attacker to cause a denial of service (assert crash) via a crafted file.

See the CVE page on Mitre.org for more details.