CVE-2026-125107 PUBLISHED

Muhammara: NULL pointer dereference in LZWDecode filter when DecodeParms omits EarlyChange key

Assigner: GitHub_M
Reserved: 09.11.2026 Published: 09.11.2026 Updated: 09.11.2026

Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. Prior to 6.0.5, Muhammara PDFParser::CreateFilterForStream() in src/deps/PDFWriter/PDFParser.cpp dereferences a null PDFInteger pointer when a PDF stream uses the LZWDecode filter with a DecodeParms dictionary that omits the EarlyChange key. An application that processes an untrusted PDF and reads the affected stream can crash, causing a denial of service. This issue is fixed in version 6.0.5.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Score: 7.5

Product Status

Vendor julianhille
Product MuhammaraJS
Versions
  • Version < 6.0.5 is affected

References

Problem Types

  • CWE-476: NULL Pointer Dereference CWE