CVE-2021-3500CWE-787
A flaw was found in djvulibre-3.5.28 and earlier
published June 24, 2021
What it is
A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument::get_djvu_file() via crafted djvu file may lead to application crash and other consequences.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00906 · 59.5th percentile
- Weakness
- CWE-787 · Out-of-bounds Write
- Published
- 2021-06-24T18:02Z
EPSS history
Timeline