Known Vulnerabilities for products from Djvulibre Project
Listed below are 14 of the newest known vulnerabilities associated with the vendor "Djvulibre Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-46312 json | An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide b... | 6.5 - MEDIUM | 2023-08-22 | 2023-08-28 |
| CVE-2021-46310 json | An issue was discovered IW44Image.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero... | 6.5 - MEDIUM | 2023-08-22 | 2023-08-28 |
| CVE-2021-32493 json | A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode() via crafted djvu... | 7.8 - HIGH | 2021-06-24 | 2022-12-21 |
| CVE-2021-32492 json | A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU::DataPool::has_data() via crafted dj... | 7.8 - HIGH | 2021-06-24 | 2022-03-09 |
| CVE-2021-32491 json | A flaw was found in djvulibre-3.5.28 and earlier. An integer overflow in function render() in tools/ddjvu via crafted djvu fi... | 7.8 - HIGH | 2021-06-24 | 2022-12-21 |
| CVE-2021-32490 json | A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filter_bv() via crafted djvu file ... | 7.8 - HIGH | 2021-06-24 | 2022-12-21 |
| CVE-2021-3630 json | An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText.cpp via a crafted djvu fil... | 5.5 - MEDIUM | 2021-06-30 | 2023-11-07 |
| CVE-2021-3500 json | A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument::get_djvu_file() via crafte... | 7.8 - HIGH | 2021-06-24 | 2022-03-09 |
| CVE-2019-18804 json | DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp. | 7.5 - HIGH | 2019-11-07 | 2023-11-07 |
| CVE-2019-15145 json | DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack (application crash via an out-of-bounds read) by crafti... | 5.5 - MEDIUM | 2019-08-18 | 2023-11-07 |
| CVE-2019-15144 json | In DjVuLibre 3.5.27, the sorting functionality (aka GArrayTemplate |
5.5 - MEDIUM | 2019-08-18 | 2023-11-07 |
| CVE-2019-15143 json | In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error (resource exhaustion cau... | 5.5 - MEDIUM | 2019-08-18 | 2023-11-07 |
| CVE-2019-15142 json | In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service (application cras... | 5.5 - MEDIUM | 2019-08-18 | 2023-11-07 |
| CVE-2012-6535 json | DjVuLibre before 3.5.25.3, as used in Evince, Sumatra PDF Reader, VuDroid, and other products, allows remote attackers to exe... | Not Provided | 2013-12-02 | 2026-04-29 |
Known software with vulnerabilities from Djvulibre Project
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Djvulibre Project | Djvulibre | 3.5.1 |