Skip to content
OpenAdvisories
High DSA-5960-1 1 CVE

djvulibre - security update

Published Jul 7, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 12 djvulibre 3.5.28-2.1~deb12u1

Vulnerabilities 1

  • High 8.4
    CVE-2025-53367 Public exploit

    DjVuLibre OOB-Write Vulnerability in MMRDecoder

    DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanruns method is affected by an OOB-write vulnerability, because it does not check that the xr pointer stays with…

    DjvuNet DjVuLibre djvulibre djvulibre Debian Ubuntu