MuPDF before 1.27.0-rc1 contains an uncontrolled recursion vulnerability in the EPUB CSS rendering engine that allows remote attackers to cause a denial of service by supplying a maliciously crafted EPUB file with deeply nested HTML elements and inline CSS styles. The function value_from_inheritable_property() in css-apply.c recurses through the CSS property inheritance chain without a depth limit, exhausting the process stack and causing a crash in any application using MuPDF for EPUB rendering.
1.25.1+ds1-5build21.25.1+ds1-61.25.1+ds1-71.25.1+ds1-71.25.1+ds1-7build11.25.1+ds1-7build21.27.0+ds1-2ubuntu11.27.0+ds1-3ubuntu11.27.0+ds1-3ubuntu21.7-11.7a-11.7a-1ubuntu0.1~esm11.11+ds1-1.11.11+ds1-21.12.0+ds1-11.12.0+ds1-1ubuntu0.1~esm11.12.0+ds1-1ubuntu0.1~esm21.15.0+ds1-11.16.1+ds1-1ubuntu11.16.1+ds1-1ubuntu1+esm11.16.1+ds1-1ubuntu1+esm21.17.0+ds1-21.19.0+ds1-11.19.0+ds1-1build11.19.0+ds1-21.19.0+ds1-2ubuntu0.1~esm11.22.2+ds1-21.22.2+ds1-2build11.23.10+ds1-11.23.10+ds1-1build11.23.10+ds1-1build21.23.10+ds1-1build31.23.10+ds1-1ubuntu0.1~esm11.23.6+ds1-11.23.7+ds1-1Exploitability
AV:NAC:LAT:NPR:NUI:PVulnerable System
VC:NVI:NVA:HSubsequent System
SC:NSI:NSA:NCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N