Ishayu Potey

**Name of the Vulnerable Software and Affected Versions** MuPDF versions prior to 1.27.0-rc1 **Description** The EPUB CSS rendering engine contains an uncontrolled recursion issue. A remote attacker can trigger a denial of service by providing a specially crafted EPUB file featuring inline CSS styles and deeply nested HTML elements. This occurs because the `value from inheritable property()` function in `css-apply.c` processes the CSS property inheritance chain without a depth limit, leading to process stack exhaustion and a subsequent application crash. **Recommendations** Update to version 1.27.0-rc1 or later.