CVE-2019-15145

DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack application crash via an out-of-bounds read by crafting a corrupted JB2 image file that is mishandled in JB2Dict::JB2Codec::getdirectcontext in libdjvu/JB2Image.h because of a missing zero-bytes check in libdjvu/GBitmap.h...

PT-2019-6089

Name of the Vulnerable Software and Affected Versions DjVuLibre version 3.5.27 Description The issue is related to a missing zero-bytes check, which can be exploited by crafting a corrupted JB2 image file. This can cause a denial-of-service attack, leading to an application crash via an...

CVE-2019-15145: Out-of-bounds Read

DjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack application crash via an out-of-bounds read by crafting a corrupted JB2 image file that is mishandled in JB2Dict::JB2Codec::getdirectcontext in libdjvu/JB2Image.h because of a missing zero-bytes check in libdjvu/GBitmap.h...