Cpe:2.3:a:artifex:pymupdf:*:*:*:*:*:*:*:*

PyMuPDF versions through 1.28.2 contain a path traversal vulnerability in the extract_objects() function, allowing attackers to perform arbitrary file writes via crafted document font metadata.