PT-2019-6094

Name of the Vulnerable Software and Affected Versions DjVuLibre versions 3.5.27 and earlier Description The issue is related to a buffer over-read in the DJVU reader component of DjVuLibre, which can cause a denial-of-service application crash when a crafted DJVU file is processed. This occurs du...

CVE-2019-15144: Uncontrolled Recursion

In DjVuLibre 3.5.27, the sorting functionality aka GArrayTemplate ::sort allows attackers to cause a denial-of-service application crash due to an Uncontrolled Recursion by crafting a PBM image file that is mishandled in libdjvu/GContainer.h...

CVE-2019-15143: Loop with Unreachable Exit Condition

In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error resource exhaustion caused by a GBitmap::readrleraw infinite loop by crafting a corrupted image file, related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp...

PT-2019-6095

Name of the Vulnerable Software and Affected Versions DjVuLibre version 3.5.27 Description The bitmap reader component in DjVuLibre allows attackers to cause a denial-of-service error by crafting a corrupted image file. This is related to an infinite loop in the GBitmap::read rle raw function,...