← Database

CVE-2025-46206

MEDIUM CVSS: 6.5 Published: 2025-08-04 Modified: 2026-07-05

Description

An issue in Artifex mupdf 1.25.6, 1.25.5 allows a remote attacker to cause a denial of service via an infinite recursion in the `mutool clean` utility. When processing a crafted PDF file containing cyclic /Next references in the outline structure, the `strip_outline()` function enters infinite recursion

Affected Platforms

Artifex Mupdf

Weakness Type

CWE-674

References