https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 02:47:51 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2025-71382 <p>MuPDF before 1.27.0-rc1 contains an uncontrolled recursion vulnerability in the EPUB CSS rendering engine that allows remote attackers to cause a denial of service by supplying a maliciously crafted EPUB file with deeply nested HTML elements and inline CSS styles. The function value_from_inheritable_property() in css-apply.c recurses through the CSS property inheritance chain without a depth limit, exhausting the process stack and causing a crash in any application using MuPDF for EPUB rendering.</p> <p>MuPDF before 1.27.0-rc1 contains an uncontrolled recursion vulnerability in the EPUB CSS rendering engine that allows remote attackers to cause a denial of service by supplying a maliciously crafted EPUB file with deeply nested HTML elements and inline CSS styles. The function value_from_inheritable_property() in css-apply.c recurses through the CSS property inheritance chain without a depth limit, exhausting the process stack and causing a crash in any application using MuPDF for EPUB rendering.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2025-71382 https://vulnerability.circl.lu/vuln/ghsa-mhwh-83qc-j6x4 <p>MuPDF before 1.27.0-rc1 contains an uncontrolled recursion vulnerability in the EPUB CSS rendering engine that allows remote attackers to cause a denial of service by supplying a maliciously crafted EPUB file with deeply nested HTML elements and inline CSS styles. The function value_from_inheritable_property() in css-apply.c recurses through the CSS property inheritance chain without a depth limit, exhausting the process stack and causing a crash in any application using MuPDF for EPUB rendering.</p> <p>MuPDF before 1.27.0-rc1 contains an uncontrolled recursion vulnerability in the EPUB CSS rendering engine that allows remote attackers to cause a denial of service by supplying a maliciously crafted EPUB file with deeply nested HTML elements and inline CSS styles. The function value_from_inheritable_property() in css-apply.c recurses through the CSS property inheritance chain without a depth limit, exhausting the process stack and causing a crash in any application using MuPDF for EPUB rendering.</p> https://vulnerability.circl.lu/vuln/ghsa-mhwh-83qc-j6x4 https://vulnerability.circl.lu/vuln/ubuntu-cve-2025-71382 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: mupdf, Ubuntu:Pro:18.04:LTS: mupdf, Ubuntu:Pro:20.04:LTS: mupdf, Ubuntu:Pro:22.04:LTS: mupdf, Ubuntu:Pro:24.04:LTS: mupdf, Ubuntu:25.10: mupdf, Ubuntu:26.04:LTS: mupdf</p> <p>MuPDF before 1.27.0-rc1 contains an uncontrolled recursion vulnerability in the EPUB CSS rendering engine that allows remote attackers to cause a denial of service by supplying a maliciously crafted EPUB file with deeply nested HTML elements and inline CSS styles. The function value_from_inheritable_property() in css-apply.c recurses through the CSS property inheritance chain without a depth limit, exhausting the process stack and causing a crash in any application using MuPDF for EPUB rendering.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: mupdf, Ubuntu:Pro:18.04:LTS: mupdf, Ubuntu:Pro:20.04:LTS: mupdf, Ubuntu:Pro:22.04:LTS: mupdf, Ubuntu:Pro:24.04:LTS: mupdf, Ubuntu:25.10: mupdf, Ubuntu:26.04:LTS: mupdf</p> <p>MuPDF before 1.27.0-rc1 contains an uncontrolled recursion vulnerability in the EPUB CSS rendering engine that allows remote attackers to cause a denial of service by supplying a maliciously crafted EPUB file with deeply nested HTML elements and inline CSS styles. The function value_from_inheritable_property() in css-apply.c recurses through the CSS property inheritance chain without a depth limit, exhausting the process stack and causing a crash in any application using MuPDF for EPUB rendering.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2025-71382