DjVuLibre vulnerabilities
1 known vulnerability in DjVuLibre from DjvuNet. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.4average CVSS score
Latest first
- 8.4 High severity
DjVuLibre: Out-of-bounds Read
DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanruns method is affected by an OOB-write vulnerability, because it does not check that the xr pointer stays withi