CVE-2025-6196
Libgepub: integer overflow in libgepub's epub archive handling
Summary
Libgepub: integer overflow in libgepub's epub archive handling
Original description
The description as published by the source.
A flaw was found in libgepub, a library used to read EPUB files. The software mishandles file size calculations when opening specially crafted EPUB files, leading to incorrect memory allocations. This issue causes the application to crash. Known affected usage includes desktop services like Tumbler, which may process malicious files automatically when browsing directories. While no direct remote attack vectors are confirmed, any application using libgepub to parse user-supplied EPUB content could be vulnerable to a denial of service.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2025-6196 libgepub
References
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- package gitlab.gnome.org
- report bugzilla.redhat.com
- report gitlab.gnome.org
- web access.redhat.com