Skip to content
OpenAdvisories
High DLA-4247-1 3 CVEs

djvulibre - security update

Published Jul 21, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 djvulibre 3.5.28-2.2~deb11u1

Vulnerabilities 3

  • High 8.4
    CVE-2025-53367 Public exploit

    DjVuLibre OOB-Write Vulnerability in MMRDecoder

    DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanruns method is affected by an OOB-write vulnerability, because it does not check that the xr pointer stays with…

    DjvuNet DjVuLibre djvulibre djvulibre Debian Ubuntu
  • Unscored —
    CVE-2021-46310

    An issue was discovered IW44Image.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide b…

    djvulibre Debian
  • Unscored —
    CVE-2021-46312

    An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via di…

    djvulibre djvulibre Debian Ubuntu