CVE-2025-55780: Null Pointer Dereference
A null pointer dereference occurs in the function breakwordforoverflowwrap() in MuPDF 1.26.4 when rendering a malformed EPUB document. Specifically, the function calls fzhtmlsplitflow() to split a FLOWWORD node, but does not check if node->next is valid before accessing node->next->overflowwrap, resulting in a crash if the split fails or returns a partial node chain.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-55780?
CVE-2025-55780 is considered a critical severity vulnerability due to the potential for application crashes when processing malformed EPUB documents.
How do I fix CVE-2025-55780?
To fix CVE-2025-55780, update to the latest version of MuPDF where the null pointer dereference issue has been resolved.
What software is impacted by CVE-2025-55780?
CVE-2025-55780 affects versions of MuPDF, specifically version 1.26.4 and earlier when rendering malformed EPUB documents.
What type of vulnerability is CVE-2025-55780?
CVE-2025-55780 is a null pointer dereference vulnerability that can lead to application crashes.
Do I need to take immediate action on CVE-2025-55780?
Yes, immediate action is recommended to mitigate the risks associated with CVE-2025-55780 by updating affected software.