CVE-2025-71382

MEDIUM 6.5

MuPDF < 1.27.0-rc1 Stack Exhaustion DoS via EPUB CSS Rendering

CVSS Score

6.5

EPSS Score

0.0%

EPSS Percentile

0th

MuPDF before 1.27.0-rc1 contains an uncontrolled recursion vulnerability in the EPUB CSS rendering engine that allows remote attackers to cause a denial of service by supplying a maliciously crafted EPUB file with deeply nested HTML elements and inline CSS styles. The function value_from_inheritable_property() in css-apply.c recurses through the CSS property inheritance chain without a depth limit, exhausting the process stack and causing a crash in any application using MuPDF for EPUB rendering.

CWE	CWE-674
Vendor	artifexsoftware
Product	mupdf
Published	Jun 23, 2026
Last Updated	Jun 23, 2026

Stay Ahead of the Next One

Get instant alerts for artifexsoftware mupdf

Be the first to know when new medium vulnerabilities affecting artifexsoftware mupdf are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Affected Versions

ArtifexSoftware / mupdf

0 < 1.27.0-rc1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/ArtifexSoftware/mupdf/releases/tag/1.27.0-rc1 bugs.ghostscript.com: https://bugs.ghostscript.com/show_bug.cgi?id=708840 github.com: https://github.com/ArtifexSoftware/mupdf/commit/70b71ab22e6de4d4c44cd301c88231f623a4e94e vulncheck.com: https://www.vulncheck.com/advisories/mupdf-rc1-stack-exhaustion-dos-via-epub-css-rendering

Credits

Ishayu Potey