495 matches found
USN-7631-1 djvulibre vulnerability
It was discovered that DjVuLibre incorrectly handled certain memory operations. If a user or automated system were tricked into processing a specially crafted DjVu file, a remote attacker could cause applications to stop responding or crash, resulting in a denial of service, or possibly execute...
djvulibre-3.5.29-1.1 on GA media (moderate)
djvulibre-3.5.29-1.1 on GA media Announcement ID: openSUSE-SU-2025:15319-1 Rating: moderate Cross-References: CVE-2025-53367 CVSS scores: CVE-2025-53367 SUSE : 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H CVE-2025-53367 SUSE : 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:H/SC:N/SI:N/SA:...
OPENSUSE-SU-2025:15319-1 djvulibre-3.5.29-1.1 on GA media
These are all security issues fixed in the djvulibre-3.5.29-1.1 package on the GA media of openSUSE Tumbleweed...
Debian: Security Advisory (DSA-5960-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 5960-1] djvulibre security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5960-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 07, 2025 https://www.debian.org/security/faq -...
Debian dsa-5960 : djview - security update
The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5960 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5960-1 [email protected] https://www.debian.org/security/...
DSA-5960-1 djvulibre - security update
Bulletin has no description...
CVE-2025-53367
DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanruns method is affected by an OOB-write vulnerability, because it does not check that the xr pointer stays within the bounds of the allocated buffer...
DEBIAN-CVE-2025-53367
DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanruns method is affected by an OOB-write vulnerability, because it does not check that the xr pointer stays within the bounds of the allocated buffer...
CVE-2025-53367 DjVuLibre OOB-Write Vulnerability in MMRDecoder
DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanruns method is affected by an OOB-write vulnerability, because it does not check that the xr pointer stays within the bounds of the allocated buffer...
CVE-2025-53367
DjVuLibre (library for DjVu) is affected by CVE-2025-53367 in the MMRDecoder::scanruns path, prior to 3.5.29. The issue is an out-of-bounds write caused by not ensuring xr stays within the allocated buffer, leading to heap corruption. An out-of-bounds read (pr) is also possible for the same reaso...
CVE-2025-53367 DjVuLibre OOB-Write Vulnerability in MMRDecoder
DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanruns method is affected by an OOB-write vulnerability, because it does not check that the xr pointer stays within the bounds of the allocated buffer...
CVE-2025-53367 DjVuLibre OOB-Write Vulnerability in MMRDecoder
DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanruns method is affected by an OOB-write vulnerability, because it does not check that the xr pointer stays within the bounds of the allocated buffer...
CVE-2025-53367
DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanruns method is affected by an OOB-write vulnerability, because it does not check that the xr pointer stays within the bounds of the allocated buffer...
CVE-2025-53367
DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanruns method is affected by an OOB-write vulnerability, because it does not check that the xr pointer stays within the bounds of the allocated buffer...
CVE-2025-53367: An exploitable out-of-bounds write in DjVuLibre
DjVuLibre version 3.5.29 was released today. It fixes CVE-2025-53367 GHSL-2025-055, an out-of-bounds OOB write in the MMRDecoder::scanruns method. The vulnerability could be exploited to gain code execution on a Linux Desktop system when the user tries to open a crafted document. DjVu is a docume...
DjVuLibre 安全漏洞
DjVuLibre is an open source implementation of DjVu computer file format that includes a DjVu file viewer, browser plugin, DjVu file decoder/encoder and other utilities. A security vulnerability exists in DjVuLibre versions prior to 3.5.29, which stems from an out-of-bounds write vulnerability in...
PT-2025-27837
Name of the Vulnerable Software and Affected Versions DjVuLibre versions prior to 3.5.29 djvulibre versions prior to 3.5.28-2.1deb12u1 mingw-djvulibre version 3.5.29 djview versions prior to 3.5.28-2ubuntu0.25.04.1 djview3 versions prior to 3.5.28-2ubuntu0.25.04.1 djvulibre-bin versions prior to...