Known Vulnerabilities for Djvulibre by Djvulibre Project
Listed below are 10 of the newest known vulnerabilities associated with "Djvulibre" by "Djvulibre Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-46312 json | An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide b... | 6.5 - MEDIUM | 2023-08-22 | 2023-08-28 |
| CVE-2021-46310 json | An issue was discovered IW44Image.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero... | 6.5 - MEDIUM | 2023-08-22 | 2023-08-28 |
| CVE-2021-32493 json | A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode() via crafted djvu... | 7.8 - HIGH | 2021-06-24 | 2022-12-21 |
| CVE-2021-32492 json | A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU::DataPool::has_data() via crafted dj... | 7.8 - HIGH | 2021-06-24 | 2022-03-09 |
| CVE-2021-32491 json | A flaw was found in djvulibre-3.5.28 and earlier. An integer overflow in function render() in tools/ddjvu via crafted djvu fi... | 7.8 - HIGH | 2021-06-24 | 2022-12-21 |
| CVE-2021-32490 json | A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filter_bv() via crafted djvu file ... | 7.8 - HIGH | 2021-06-24 | 2022-12-21 |
| CVE-2021-3630 json | An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText.cpp via a crafted djvu fil... | 5.5 - MEDIUM | 2021-06-30 | 2023-11-07 |
| CVE-2021-3500 json | A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument::get_djvu_file() via crafte... | 7.8 - HIGH | 2021-06-24 | 2022-03-09 |
| CVE-2019-18804 json | DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp. | 7.5 - HIGH | 2019-11-07 | 2023-11-07 |
| CVE-2019-15145 json | DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack (application crash via an out-of-bounds read) by crafti... | 5.5 - MEDIUM | 2019-08-18 | 2023-11-07 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Djvulibre Project | Djvulibre | 3.5.9 | |||
| Application | Djvulibre Project | Djvulibre | 3.5.8 | |||
| Application | Djvulibre Project | Djvulibre | 3.5.7 | |||
| Application | Djvulibre Project | Djvulibre | 3.5.6 | |||
| Application | Djvulibre Project | Djvulibre | 3.5.5 | |||
| Application | Djvulibre Project | Djvulibre | 3.5.4 | |||
| Application | Djvulibre Project | Djvulibre | 3.5.3 | |||
| Application | Djvulibre Project | Djvulibre | 3.5.27 | |||
| Application | Djvulibre Project | Djvulibre | 3.5.25 | |||
| Application | Djvulibre Project | Djvulibre | 3.5.24 | |||
| Application | Djvulibre Project | Djvulibre | 3.5.23 | |||
| Application | Djvulibre Project | Djvulibre | 3.5.22 | |||
| Application | Djvulibre Project | Djvulibre | 3.5.21 | |||
| Application | Djvulibre Project | Djvulibre | 3.5.20 | |||
| Application | Djvulibre Project | Djvulibre | 3.5.2 | |||
| Application | Djvulibre Project | Djvulibre | 3.5.19 | |||
| Application | Djvulibre Project | Djvulibre | 3.5.18 | |||
| Application | Djvulibre Project | Djvulibre | 3.5.17 | |||
| Application | Djvulibre Project | Djvulibre | 3.5.16 | |||
| Application | Djvulibre Project | Djvulibre | 3.5.15 |