CVE-2025-71382

Name of the Vulnerable Software and Affected Versions MuPDF versions prior to 1.27.0-rc1

Description The EPUB CSS rendering engine contains an uncontrolled recursion issue. A remote attacker can trigger a denial of service by providing a specially crafted EPUB file featuring inline CSS styles and deeply nested HTML elements. This occurs because the value from inheritable property() function in css-apply.c processes the CSS property inheritance chain without a depth limit, leading to process stack exhaustion and a subsequent application crash.

Recommendations Update to version 1.27.0-rc1 or later.