Mupdf · Mupdf · CVE-2023-31794
**Name of the Vulnerable Software and Affected Versions**
MuPDF version 1.21.1
**Description**
The issue is related to an infinite recursion in the `pdf mark list push` component, which can be exploited by attackers to cause a Denial of Service (DoS) via a crafted PDF file. This allows an attacker to disrupt the service.
**Recommendations**
For MuPDF version 1.21.1, as a temporary workaround, consider disabling the `pdf mark list push` component until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.