CVE-2025-53367-POC

djvulibremmrexploit Este proyecto proporciona una implementación mínima en C++ que desencadena una vulnerabilidad conocida de escritura fuera de los límites del heap en DjVuLibre. El código no convierte el fallo en un arma; solo reproduce la ruta de ejecución defectuosa para que el problema pueda...

DjVuLibre-poc-CVE-2025-53367

1- ¿QUÉ ES DJVU. DjVu pronunciado "déjà vu" es un conjunto de tecnologías de compresión, un formato de archivo, y una plataforma de software para la entrega a través de la Web de documentos digitales, documentos escaneados e imágenes de alta resolución. Los documentos DjVu se descargan y visualiz...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: djvulibre (UTSA-2023-003110)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003110 advisory. An issue was discovered IW44Image.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero. Tenable has extracted the preceding...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: djvulibre (UTSA-2023-003109)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003109 advisory. An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero. Tenable has extracted the...

Astra Linux – Vulnerability in DjVuLibre

In DjVuLibre 3.5.27, the DjVmDir.cpp file within the DJVU reader component allows attackers to cause a denial-of-service attack resulting in a crash of the application by creating a DJVU file that triggers a heap-based buffer overflow attack in the GStringRep::strdup function within...

Astra Linux – Vulnerability in DjVuLibre

In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error resource exhaustion caused by an infinite loop in GBitmap::readrleraw by creating a corrupted image file, which is related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp...

Astra Linux – Vulnerability in DjVuLibre

A flaw was discovered in djvulibre-3.5.28 and earlier. A stack overflow occurred in the function DJVU::DjVuDocument::getdjvufile, due to a malicious djvu file, which could lead to the application crashing and other related issues...

Astra Linux – Vulnerability in DjVuLibre

A out-of-bounds write vulnerability was discovered in DjVuLibre, specifically in the function DjVU::DjVuTXT::decode in DjVuText.cpp. A crafted DjVU file can trigger this issue, leading to a crash or segmentation fault. This flaw affects DjVuLibre versions prior to 3.5.28...

Astra Linux – Vulnerability in DjVuLibre

A issue was discovered in IW44EncodeCodec.cpp within djvulibre 3.5.28, which allows attackers to cause a denial of service through division by zero...

Astra Linux – Vulnerability in DjVuLibre

DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanruns method was vulnerable to an OOB-write vulnerability, as it did not check that the xr pointer remained within the bounds of the allocated buffer...

Astra Linux – Vulnerability in DjVuLibre

A flaw was discovered in djvulibre-3.5.28 and earlier. A malicious read operation in the function DJVU::DataPool::hasdata, through a crafted djvu file, may cause the application to crash and lead to other issues...

Astra Linux – Vulnerability in DjVuLibre

DjVuLibre 3.5.27 allows attackers to carry out a denial-of-service attack application crashes due to an out-of-bounds read by creating a corrupted JB2 image file. This occurs due to improper handling of the JB2 image file in the JB2Dict::JB2Codec::getdirectcontext function in libdjvu/JB2Image.h,...

Astra Linux – Vulnerability in DjVuLibre

DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filterfv at IW44EncodeCodec.cpp...

ROOT-OS-DEBIAN-12-CVE-2021-46312 CVE-2021-46312 in djvulibre - Patched by Root

Root has patched CVE-2021-46312 in the djvulibre package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2021-46310 CVE-2021-46310 in djvulibre - Patched by Root

Root has patched CVE-2021-46310 in the djvulibre package for Root:Debian:12. Multiple fixed versions available...

Astra Linux – Vulnerability in DjVuLibre

A issue was discovered in IW44Image.cpp within djvulibre 3.5.28, which allows attackers to cause a denial of service through division by zero...

Astra Linux – Vulnerability in DjVuLibre

A flaw was discovered in djvulibre-3.5.28 and earlier. An integer overflow in the render function in tools/ddjvu, through a crafted djvu file, may cause the application to crash and lead to other issues...

Astra Linux – Vulnerability in DjVuLibre

A flaw was discovered in djvulibre-3.5.28 and earlier. An out-of-bounds write operation in the DJVU::filterbv function, through a crafted djvu file, may cause the application to crash and lead to other issues...

OPENSUSE-SU-2026:20850-1 Security update for evince

This update for evince fixes the following issues: Changes in evince: - Update to version 48.2 bsc1265880 CVE-2026-46529: + shell: Quote strings in arguments used when calling evspawn - Update to version 48.1+6: + build: bump DjVuLibre version required + libview: Fix crash in the accessible code...

[SECURITY] Fedora 43 Update: djvulibre-3.5.30-1.fc43

DjVu is a web-centric format and software platform for distributing documents and images. DjVu can advantageously replace PDF, PS, TIFF, JPEG, and GIF for distributing scanned documents, digital documents, or high-resolution picture s. DjVu content downloads faster, displays and renders faster,...