Launchpad.net

CVE 2018-18662

There is an out-of-bounds read in fz_run_t3_glyph in fitz/font.c in Artifex MuPDF 1.14.0, as demonstrated by mutool.

See the CVE page on Mitre.org for more details.