Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

djvulibre project djvulibre vulnerabilities and exploits

(subscribe to this query)
9.3
CVSSv2
CVE-2012-6535
DjVuLibre prior to 3.5.25.3, as used in Evince, Sumatra PDF Reader, VuDroid, and other products, allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption) via a crafted DjVu (aka .djv) file.
Djvulibre Project Djvulibre 3.5.21Djvulibre Project Djvulibre 3.5.20Djvulibre Project Djvulibre 3.5.13Djvulibre Project Djvulibre 3.5.12Djvulibre Project Djvulibre 3.5.4Djvulibre Project Djvulibre 3.5.3Djvulibre Project DjvulibreDjvulibre Project Djvulibre 3.5.24Djvulibre Project Djvulibre 3.5.17Djvulibre Project Djvulibre 3.5.16Djvulibre Project Djvulibre 3.5.9Djvulibre Project Djvulibre 3.5.8Djvulibre Project Djvulibre 3.5.23Djvulibre Project Djvulibre 3.5.22Djvulibre Project Djvulibre 3.5.15Djvulibre Project Djvulibre 3.5.14Djvulibre Project Djvulibre 3.5.7Djvulibre Project Djvulibre 3.5.6Djvulibre Project Djvulibre 3.5.5Djvulibre Project Djvulibre 3.5.19Djvulibre Project Djvulibre 3.5.18Djvulibre Project Djvulibre 3.5.11
NA
CVE-2021-46312
An issue exists IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows malicious users to cause a denial of service via divide by zero.
Djvulibre Project Djvulibre 3.5.28
NA
CVE-2021-46310
An issue exists IW44Image.cpp in djvulibre 3.5.28 in allows malicious users to cause a denial of service via divide by zero.
Djvulibre Project Djvulibre 3.5.28
6.8
CVSSv2
CVE-2021-32490
A flaw was found in djvulibre-3.5.28 and previous versions. An out of bounds write in function DJVU::filter_bv() via crafted djvu file may lead to application crash and other consequences.
Djvulibre Project DjvulibreDebian Debian Linux 10.0Debian Debian Linux 11.0
6.8
CVSSv2
CVE-2021-32491
A flaw was found in djvulibre-3.5.28 and previous versions. An integer overflow in function render() in tools/ddjvu via crafted djvu file may lead to application crash and other consequences.
Djvulibre Project DjvulibreDebian Debian Linux 10.0Debian Debian Linux 11.0
6.8
CVSSv2
CVE-2021-32492
A flaw was found in djvulibre-3.5.28 and previous versions. An out of bounds read in function DJVU::DataPool::has_data() via crafted djvu file may lead to application crash and other consequences.
Djvulibre Project DjvulibreDebian Debian Linux 10.0Debian Debian Linux 11.0
6.8
CVSSv2
CVE-2021-32493
A flaw was found in djvulibre-3.5.28 and previous versions. A heap buffer overflow in function DJVU::GBitmap::decode() via crafted djvu file may lead to application crash and other consequences.
Djvulibre Project DjvulibreDebian Debian Linux 10.0Debian Debian Linux 11.0
6.8
CVSSv2
CVE-2021-3500
A flaw was found in djvulibre-3.5.28 and previous versions. A Stack overflow in function DJVU::DjVuDocument::get_djvu_file() via crafted djvu file may lead to application crash and other consequences.
Djvulibre Project DjvulibreDebian Debian Linux 10.0Debian Debian Linux 11.0
4.3
CVSSv2
CVE-2021-3630
An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText.cpp via a crafted djvu file which may lead to crash and segmentation fault. This flaw affects DjVuLibre versions before 3.5.28.
Djvulibre Project DjvulibreDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34
5
CVSSv2
CVE-2019-18804
DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.
Djvulibre Project Djvulibre 3.5.27Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 30Fedoraproject Fedora 31Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 16.04Opensuse Leap 15.0Opensuse Leap 15.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook