CVE-2019-6131 (NVD)

2019-01-11

svg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack consumption in svg_run_use_symbol, svg_run_element, and svg_run_use, as demonstrated by mutool.

Products Mupdf
Type Uncontrolled Recursion (CWE-674)
First patch - None (likely due to unavailable code)
Links • https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SEK2EHVNREJ7XZMFF2MXRWKIF4IBHPNE/
• https://bugs.ghostscript.com/show_bug.cgi?id=700442
• http://www.securityfocus.com/bid/106558
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CNJNEX5EW6YH5OARXXSSXW4HHC5PIBSY/