Περιγραφή
MuPDF before 1.27.0-rc1 contains an uncontrolled recursion vulnerability in the EPUB CSS rendering engine that allows remote attackers to cause a denial of service by supplying a maliciously crafted EPUB file with deeply nested HTML elements and inline CSS styles. The function value_from_inheritable_property() in css-apply.c recurses through the CSS property inheritance chain without a depth limit, exhausting the process stack and causing a crash in any application using MuPDF for EPUB rendering.
CVSS 6.5EPSS 0.322%Κίνδυνος 0.67
Προβολή πηγής- Δημοσίευση
- 2026-06-23 18:17:41
- Επηρεαζόμενες εκδόσεις
- <1.27.0-rc1
- Τύπος
- Βιβλιοθήκη
- Διάνυσμα
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H