CVE-2019-6131 — Uncontrolled Recursion in Mupdf

CWE-674 — Uncontrolled Recursion9 documents7 sources
Severity
5.5MEDIUMNVD
EPSS
0.2%
top 56.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Artifex Mupdf
Timeline
PublishedJan 11
Latest updateMay 13

Description

svg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack consumption in svg_run_use_symbol, svg_run_element, and svg_run_use, as demonstrated by mutool.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶Debianartifex/mupdf< 1.14.0+ds1-3+3
▶NVDartifex/mupdf1.14.0

🔴Vulnerability Details

3
GHSA
GHSA-p4v2-j6v4-fjv7: svg-run↗2022-05-13
▶
OSV
CVE-2019-6131: svg-run↗2019-01-11
▶
CVEList
CVE-2019-6131: svg-run↗2019-01-11
▶

📋Vendor Advisories

1
Debian
CVE-2019-6131: mupdf - svg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack consumption ...↗2019
▶

💬Community

3
Bugzilla
CVE-2019-6130 CVE-2019-6131 mupdf: various flaws [fedora-all]↗2019-01-18
▶
Bugzilla
CVE-2019-6131 mupdf: Stack overflow in function svg_run_element, svg_run_use_symbol, svg_run_use of file svg_run.c↗2019-01-18
▶
Bugzilla
CVE-2019-6131 python-PyMuPDF: MuPDF:Stack overflow in function svg_run_element, svg_run_use_symbol, svg_run_use of file svg_run.c in MuPDF. [fedora-all]↗2019-01-18
▶
CVE-2019-6131 — Uncontrolled Recursion in Artifex Mupdf | cvebase