CVE-2025-71382

MuPDF < 1.27.0-rc1 Stack Exhaustion DoS via EPUB CSS Rendering

CVSS 7.1 HIGHEPSS 0.3%CWE-674

Vexday Risk Score

41Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS 7.1EPSS 0.3%KEV nãoPoC públicaNuclei —Metasploit —Patch referenciado

Lifecycle

23 Jun 2026Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

MuPDF before 1.27.0-rc1 contains an uncontrolled recursion vulnerability in the EPUB CSS rendering engine that allows remote attackers to cause a denial of service by supplying a maliciously crafted EPUB file with deeply nested HTML elements and inline CSS styles. The function value_from_inheritable_property() in css-apply.c recurses through the CSS property inheritance chain without a depth limit, exhausting the process stack and causing a crash in any application using MuPDF for EPUB rendering.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected products

ArtifexSoftware · mupdf

public PoCs found — 1

cve_referencebugs.ghostscript.com/show_bug.cgi?id=708840unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://bugs.ghostscript.com/show_bug.cgi?id=708840 https://github.com/ArtifexSoftware/mupdf/commit/70b71ab22e6de4d4c44cd301c88231f623a4e94e https://github.com/ArtifexSoftware/mupdf/releases/tag/1.27.0-rc1 https://www.vulncheck.com/advisories/mupdf-rc1-stack-exhaustion-dos-via-epub-css-rendering