High severity · published Feb 10, 2026
CVE-2025-15569
Artifex MuPDF win_main.c get_system_dpi uncontrolled search path
7.0
CVSS
0.1%
EPSS
No
On KEV
Description
A flaw has been found in Artifex MuPDF up to 1.26.1 on Windows. The impacted element is the function get_system_dpi of the file platform/x11/win_main.c. This manipulation causes uncontrolled search path. The attack requires local access. The attack is considered to have high complexity. The exploitability is regarded as difficult. Upgrading to version 1.26.2 is sufficient to resolve this issue. Patch name: ebb125334eb007d64e579204af3c264aadf2e244. Upgrading the affected component is recommended.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MU
MuPDF · Artifex
1.26.0; 1.26.1 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-15569
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-15569
artifex.com
https://artifex.com/
casper.mupdf.com
https://casper.mupdf.com/downloads/archive/mupdf-1.26.2-windows.zip
cgit.ghostscript.com
https://cgit.ghostscript.com/cgi-bin/cgit.cgi/mupdf.git/commit/?id=ebb125334eb007d64e579204af3c264aadf2e244
vuldb.com
https://vuldb.com/?ctiid.344924
vuldb.com
https://vuldb.com/?id.344924
vuldb.com
https://vuldb.com/?submit.750978
More from MuPDF
9.8
CVE-2019-7321
Usage of an uninitialized variable in the function fz_load_jpeg in Artifex MuPDF 1.14 can result in a heap overflow vulnerability that allows an attacker to execute arbitrary code
9.8
CVE-2016-6525
Heap-based buffer overflow in the pdf_load_mesh_params function in pdf/pdf-shade.c in MuPDF allows remote attackers to cause a denial of service (crash) or execute arbitrary code…
7.8
CVE-2020-16600
A Use After Free vulnerability exists in Artifex Software, Inc
7.8
CVE-2012-5340
SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file
7.8
CVE-2019-13290
Artifex MuPDF 1.15.0 has a heap-based buffer overflow in fz_append_display_node located at fitz/list-device.c, allowing remote attackers to execute arbitrary code via a crafted…