Approved changes feed: RSS · Atom

cpe:2.3:a:artifexsoftware:mupdf:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorArtifexsoftware (daf029a4-dd3e-535a-8a69-b48773e4dc25)
ProductMupdf (f1f2576e-05ad-56a4-9398-af9ac90f4f0d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-71382 vulnerable 2026-07-29 00:18:08.367721 MuPDF < 1.27.0-rc1 Stack Exhaustion DoS via EPUB CSS Rendering
MEDIUM (6.5)
MuPDF before 1.27.0-rc1 contains an uncontrolled recursion vulnerability in the EPUB CSS rendering engine that allows remote attackers to cause a denial of service by supplying a maliciously crafted EPUB file with deeply nested HTML elements and inline CSS styles. The function value_from_inheritable_property() in css-apply.c recurses through the CSS property inheritance chain without a depth limit, exhausting the process stack and causing a crash in any application using MuPDF for EPUB rendering.
Published: 2026-06-23T17:21:48.562Z
Updated: 2026-07-14T22:26:09.463Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.