Name of the Vulnerable Software and Affected Versions:

Artifex mupdf versions 1.25.5 through 1.25.6

Description:

An issue in Artifex mupdf allows a remote attacker to cause a denial of service via an infinite recursion in the `mutool clean` utility. When processing a crafted PDF file containing cyclic /Next references in the outline structure, the `strip outline()` function enters infinite recursion.

Recommendations:

Artifex mupdf version 1.25.5: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Artifex mupdf version 1.25.6: At the moment, there is no information about a newer version that contains a fix for this vulnerability.