CVE WATCH / VULNERABILITY DETAIL
CVE-2026-125107
HIGHCVSS 7.5NVD feed
Published 9 November 2026 · tracked since 10 November 2026
Description
Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. Prior to 6.0.5, Muhammara PDFParser::CreateFilterForStream() in src/deps/PDFWriter/PDFParser.cpp dereferences a null PDFInteger pointer when a PDF stream uses the LZWDecode filter with a DecodeParms di
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-125112
- CVE-2026-123817
- CVE-2026-123816 HIGH 8.1
- CVE-2026-123815
- CVE-2026-123814 MEDIUM 6.4
- CVE-2026-123813 HIGH 7.5
- CVE-2026-123810 MEDIUM 4.3
- CVE-2026-123807 CRITICAL 9.8
- CVE-2026-123806 MEDIUM 4
- CVE-2026-114032 HIGH 7.8