CVE-2019-6131

Name of the Vulnerable Software and Affected Versions Artifex MuPDF version 1.14.0

Description The issue is related to infinite recursion with stack consumption in the svg run use symbol, svg run element, and svg run use functions in the svg-run.c file. This can be demonstrated using mutool.

Recommendations For Artifex MuPDF version 1.14.0, consider disabling the svg run use symbol, svg run element, and svg run use functions as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.