DjVuLibre-poc-CVE-2025-53367

1- WHAT IS DJVU. DjVu pronounced "déjà vu" a set of compression technologies, a file format, and a software platform for the delivery over the Web of digital documents, scanned documents, and high resolution images. DjVu documents download and display extremely quickly, and look exactly the same ...

openSUSE Security Advisory (SUSE-SU-2025:02703-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : djvulibre (SUSE-SU-2025:02695-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:02695-1 advisory. - CVE-2025-53367: Fixed a bug where a crafted document may lead to an out of bound write. bsc1245773 Tenable has extracted the preceding description...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : djvulibre (SUSE-SU-2025:02703-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02703-1 advisory. - CVE-2025-53367: Fixed a bug where a crafted document may lead to an out of bound write. bsc1245773...

SUSE-SU-2025:02703-1 Security update for djvulibre

This update for djvulibre fixes the following issues: - CVE-2025-53367: Fixed a bug where a crafted document may lead to an out of bound write. bsc1245773...

SUSE-SU-2025:02695-1 Security update for djvulibre

This update for djvulibre fixes the following issues: - CVE-2025-53367: Fixed a bug where a crafted document may lead to an out of bound write. bsc1245773...

Important: djvulibre

Issue Overview: DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanruns method is affected by an OOB-write vulnerability, because it does not check that the xr pointer stays within the bounds of the...

Amazon Linux 2 : djvulibre (ALASMATE-DESKTOP1.X-2025-010)

The version of djvulibre installed on the remote host is prior to 3.5.27-30. It is, therefore, affected by a vulnerability as referenced in the ALAS2MATE-DESKTOP1.X-2025-010 advisory. DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to...

Debian dla-4247 : djview - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4247 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4247-1 [email protected]...

Fedora: Security Advisory (FEDORA-2025-e286662e59)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-0f35c5dbbb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : mingw-djvulibre (2025-0f35c5dbbb)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-0f35c5dbbb advisory. Update to 3.5.29, fixes CVE-2025-53367. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 42 : mingw-djvulibre (2025-e286662e59)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-e286662e59 advisory. Update to 3.5.29, fixes CVE-2025-53367. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

djvulibre-3.5.29-1.1 on GA media (moderate)

djvulibre-3.5.29-1.1 on GA media Announcement ID: openSUSE-SU-2025:15319-1 Rating: moderate Cross-References: CVE-2025-53367 CVSS scores: CVE-2025-53367 SUSE : 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H CVE-2025-53367 SUSE : 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:H/SC:N/SI:N/SA:...

Debian: Security Advisory (DSA-5960-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5960-1] djvulibre security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5960-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 07, 2025 https://www.debian.org/security/faq -...

Debian dsa-5960 : djview - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5960 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5960-1 [email protected] https://www.debian.org/security/...

CVE-2025-53367

DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanruns method is affected by an OOB-write vulnerability, because it does not check that the xr pointer stays within the bounds of the allocated buffer...

CVE-2025-53367

DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanruns method is affected by an OOB-write vulnerability, because it does not check that the xr pointer stays within the bounds of the allocated buffer...

CVE-2025-53367

creationtimestamp| type| source ---|---|--- 2025-07-03 18:02:01+00:00| seen| https://seclists.org/oss-sec/2025/q3/5 2025-07-03 18:52:20+00:00| seen| https://github.blog/security/vulnerability-research/cve-2025-53367-an-exploitable-out-of-bounds-write-in-djvulibre/ 2025-07-03 20:26:47+00:00| seen|...