CVE-2025-6196

Medium

Description

A flaw was found in libgepub, a library used to read EPUB files. The software mishandles file size calculations when opening specially crafted EPUB files, leading to incorrect memory allocations. This issue causes the application to crash. Known affected usage includes desktop services like Tumbler, which may process malicious files automatically when browsing directories. While no direct remote attack vectors are confirmed, any application using libgepub to parse user-supplied EPUB content could be vulnerable to a denial of service.

SeverityMedium

CVSS5.5

Exploit probability—

ProductGnome Libgepub

PublishedJun 17, 2025

First seenJun 17, 2025

Weakness typeCWE-190Integer overflow

How to fix

Vendor advisories

access.redhat.com/security/cve/CVE-2025-6196

Affected products

Product	Affected versions	Fixed in
gnome libgepub	No range specified	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.