CVE-2025-6196

Name of the Vulnerable Software and Affected Versions libgepub (affected versions not specified)

Description A flaw in libgepub causes the software to mishandle file size calculations when opening specially crafted EPUB files, leading to incorrect memory allocations. This results in the application crashing. The issue may affect applications that use libgepub to parse user-supplied EPUB content, potentially leading to a denial of service. Known affected usage includes desktop services like Tumbler, which may process malicious files automatically when browsing directories.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.