svg-run.c in Artifex MuPDF 1.14.0 has infinite recursion with stack consumption in svg_run_use_symbol, svg_run_element, and svg_run_use, as demonstrated by mutool.
Debian Bug report logs -
#912013
mupdf: CVE-2018-18662
Package:
src:mupdf;
Maintainer for src:mupdf is Kan-Ru Chen (陳侃如) <koster@debianorg>;
Reported by: Salvatore Bonaccorso <carnil@debianorg>
Date: Sat, 27 Oct 2018 09:27:01 UTC
Severity: important
Tags: fixed-upstream, security, upstream
Found in version m ...