Yu Hong and Zheng Jihong discovered a heap overflow vulnerability within
the pdf_load_mesh_params function, allowing an attacker to cause an
application crash (denial-of-service), or potentially to execute
arbitrary code with the privileges of the user running MuPDF, if a
specially crafted PDF file is processed.