Description: mupdf is a lightweight PDF viewer and toolkit written in portable C. A fuzzing through mutool revealed a use-after-free. The complete ASan output: # mutool info $FILE ==5430==ERROR: AddressSanitizer: heap-use-after-free on address 0x60300000ea42 at pc 0x7fbc4c3824e5 bp 0x7ffee68ead70 sp … Continue reading mupdf: use-after-free in pdf_to_num (pdf-object.c)