Stack overflow

A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument::getdjvufile via crafted djvu file may lead to application crash and other consequences...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write. A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument::getdjvufile via crafted djvu file may lead to application crash and other consequences. Remediation A fix was pushed...

CVE-2021-32490

A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filterbv via crafted djvu file may lead to application crash and other consequences...

CVE-2021-32493

CVE-2021-32493 affects djvulibre up to version 3.5.28 and earlier, with a heap buffer overflow in DJVU::GBitmap::decode() when processing crafted DjVu files. Impact per sources ranges from application crash to potential arbitrary code execution in some advisories. Remediation is to upgrade/downgr...

CVE-2021-32493

A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode via crafted djvu file may lead to application crash and other consequences...

CVE-2021-32493

A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode via crafted djvu file may lead to application crash and other consequences...

CVE-2021-32493

A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode via crafted djvu file may lead to application crash and other consequences...

CVE-2021-32492

A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU::DataPool::hasdata via crafted djvu file may lead to application crash and other consequences...

CVE-2021-32492

CVE-2021-32492 affects djvulibre up to version 3.5.28. The flaw is an out-of-bounds read in DJVU::DataPool::has_data() when processing crafted DjVu files, which may cause an application crash and other consequences. Advisories (e.g., Arch Linux ASA-202105-18) describe potential arbitrary code exe...

CVE-2021-32492

A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU::DataPool::hasdata via crafted djvu file may lead to application crash and other consequences...

CVE-2021-32492

A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU::DataPool::hasdata via crafted djvu file may lead to application crash and other consequences...

CVE-2021-32490

A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filterbv via crafted djvu file may lead to application crash and other consequences...

CVE-2021-32490

A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filterbv via crafted djvu file may lead to application crash and other consequences...

CVE-2021-32490

A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filterbv via crafted djvu file may lead to application crash and other consequences...

CVE-2021-32490

CVE-2021-32490 affects djvulibre up to version 3.5.28 and earlier. A flaw causes an out-of-bounds write in DJVU::filter_bv() when processing crafted DjVu files, potentially crashing the application and causing other consequences. Public advisories confirm the issue and list related fixes/updates....

CVE-2021-32491

CVE-2021-32491 affects djvulibre

CVE-2021-32491

A flaw was found in djvulibre-3.5.28 and earlier. An integer overflow in function render in tools/ddjvu via crafted djvu file may lead to application crash and other consequences...

CVE-2021-32491

A flaw was found in djvulibre-3.5.28 and earlier. An integer overflow in function render in tools/ddjvu via crafted djvu file may lead to application crash and other consequences...

CVE-2021-3500

A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument::getdjvufile via crafted djvu file may lead to application crash and other consequences...

CVE-2021-3500

CVE-2021-3500 affects djvulibre up to version 3.5.28. A stack overflow in function DJVU::DjVuDocument::get_djvu_file() triggered by a crafted DjVu file may crash the application and, as described in connected advisories, could lead to further consequences including possible arbitrary code executi...