Crass converts CSS scientific notation number values with unbounded exponentiation before it clamps the result to "Float::MAX". Applications that use Crass to parse attacker-controlled CSS strings can be forced to spend disproportionate CPU and memory parsing a tiny input, possibly resulting in a crash.