Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

djvulibre project djvulibre 3.5.28 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2021-46310
An issue exists IW44Image.cpp in djvulibre 3.5.28 in allows malicious users to cause a denial of service via divide by zero.
Djvulibre Project Djvulibre 3.5.28
NA
CVE-2021-46312
An issue exists IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows malicious users to cause a denial of service via divide by zero.
Djvulibre Project Djvulibre 3.5.28
6.8
CVSSv2
CVE-2021-32490
A flaw was found in djvulibre-3.5.28 and previous versions. An out of bounds write in function DJVU::filter_bv() via crafted djvu file may lead to application crash and other consequences.
Djvulibre Project DjvulibreDebian Debian Linux 10.0Debian Debian Linux 11.0
6.8
CVSSv2
CVE-2021-32491
A flaw was found in djvulibre-3.5.28 and previous versions. An integer overflow in function render() in tools/ddjvu via crafted djvu file may lead to application crash and other consequences.
Djvulibre Project DjvulibreDebian Debian Linux 10.0Debian Debian Linux 11.0
6.8
CVSSv2
CVE-2021-32492
A flaw was found in djvulibre-3.5.28 and previous versions. An out of bounds read in function DJVU::DataPool::has_data() via crafted djvu file may lead to application crash and other consequences.
Djvulibre Project DjvulibreDebian Debian Linux 10.0Debian Debian Linux 11.0
6.8
CVSSv2
CVE-2021-32493
A flaw was found in djvulibre-3.5.28 and previous versions. A heap buffer overflow in function DJVU::GBitmap::decode() via crafted djvu file may lead to application crash and other consequences.
Djvulibre Project DjvulibreDebian Debian Linux 10.0Debian Debian Linux 11.0
6.8
CVSSv2
CVE-2021-3500
A flaw was found in djvulibre-3.5.28 and previous versions. A Stack overflow in function DJVU::DjVuDocument::get_djvu_file() via crafted djvu file may lead to application crash and other consequences.
Djvulibre Project DjvulibreDebian Debian Linux 10.0Debian Debian Linux 11.0
4.3
CVSSv2
CVE-2021-3630
An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText.cpp via a crafted djvu file which may lead to crash and segmentation fault. This flaw affects DjVuLibre versions before 3.5.28.
Djvulibre Project DjvulibreDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34
5
CVSSv2
CVE-2019-18804
DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.
Djvulibre Project Djvulibre 3.5.27Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 30Fedoraproject Fedora 31Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 16.04Opensuse Leap 15.0Opensuse Leap 15.1
4.3
CVSSv2
CVE-2019-15142
In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows malicious users to cause a denial-of-service (application crash in GStringRep::strdup in libdjvu/GString.cpp caused by a heap-based buffer over-read) by crafting a DJVU file.
Djvulibre Project Djvulibre 3.5.27Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 29Fedoraproject Fedora 30Fedoraproject Fedora 31Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 16.04Opensuse Leap 15.0Opensuse Leap 15.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-21991CVE-2024-32674path traversalCVE-2023-21987denial of servicedosCVE-2024-4647CVE-2024-25519CVE-2024-33612
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook