Skip to content
OpenAdvisories
Medium · 5.5 CVE-2025-6196 EUVD-2025-18504GHSA-mpq7-j427-mjff

Libgepub: integer overflow in libgepub's epub archive handling

Published Jun 17, 2025 · Updated Nov 5, 2026 · Assigned by redhat

Description

A flaw was found in libgepub, a library used to read EPUB files. The software mishandles file size calculations when opening specially crafted EPUB files, leading to incorrect memory allocations. This issue causes the application to crash. Known affected usage includes desktop services like Tumbler, which may process malicious files automatically when browsing directories. While no direct remote attack vectors are confirmed, any application using libgepub to parse user-supplied EPUB content could be vulnerable to a denial of service.

Affected products

VendorProductAffectedFixed
— libgepub < 0.7.2 0.7.2
Red Hat Red Hat Enterprise Linux 7 — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 libgepub 0.7.3-1 —
Debian 13 libgepub 0.7.3-1 —
Debian 12 libgepub No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS libgepub No fix yet —
Ubuntu 22.04 LTS libgepub No fix yet —
Ubuntu 20.04 LTS libgepub No fix yet —
Ubuntu 18.04 LTS libgepub No fix yet —
ReleasePackageFixed inAdvisory
SLES 15 SP7 libgepub 0.6.0-150200.3.5.1 SUSE-SU-2025:02222-1, SUSE-SU-2025:02213-1
SLES 15 SP6 libgepub 0.6.0-150200.3.5.1 SUSE-SU-2025:02222-1, SUSE-SU-2025:02213-1
ReleasePackageFixed inAdvisory
openSUSE Leap 15.6 libgepub 0.7.1-150600.3.5.1 SUSE-SU-2025:02222-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 libgepub +1 0.6.0-1.amzn2.0.1 ALAS2-2025-2910

Advisories 3

References