CVE-2020-12825

Name of the Vulnerable Software and Affected Versions libcroco versions 0.6.13 and earlier

Description The issue is related to the cr parser parse any core function in the cr-parser.c component of the libcroco library, which is used for working with cascading style sheets (css2). It is associated with uncontrolled recursion. Exploitation of this issue may allow a remote attacker to compromise data integrity and cause a denial of service.

Recommendations For libcroco versions 0.6.13 and earlier, consider disabling the cr parser parse any core function as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.