NetSight
IP …
medium5.5

CVE-2021-3630

An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText.cpp via a crafted djvu file which may lead to crash and segm…

Impact

An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText.cpp via a crafted djvu file which may lead to crash and segmentation fault. This flaw affects DjVuLibre versions prior to 3.5.28.

Affected products

VendorProductAffected versions
Djvulibre ProjectDjvulibre
before 3.5.28
DebianDebian Linux
Versions 9.0, 10.0, 11.0
FedoraprojectFedora
Versions 33, 34

Weakness classification

CWE-787

References