PT-2019-6095

Name of the Vulnerable Software and Affected Versions DjVuLibre version 3.5.27 Description The bitmap reader component in DjVuLibre allows attackers to cause a denial-of-service error by crafting a corrupted image file. This is related to an infinite loop in the GBitmap::read rle raw function,...

CVE-2019-15144: Uncontrolled Recursion

In DjVuLibre 3.5.27, the sorting functionality aka GArrayTemplate ::sort allows attackers to cause a denial-of-service application crash due to an Uncontrolled Recursion by crafting a PBM image file that is mishandled in libdjvu/GContainer.h...

CVE-2019-15143: Loop with Unreachable Exit Condition

In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error resource exhaustion caused by a GBitmap::readrleraw infinite loop by crafting a corrupted image file, related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp...

PT-2019-6089

Name of the Vulnerable Software and Affected Versions DjVuLibre version 3.5.27 Description The issue is related to a missing zero-bytes check, which can be exploited by crafting a corrupted JB2 image file. This can cause a denial-of-service attack, leading to an application crash via an...