CVE-2021-3500CWE-787

CVE-2021-3500: vulnerability in djvulibre

Published · Updated

Follow this CVE+ Monitor djvulibre+ Monitor djvulibre

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.9%
A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument::get_djvu_file() via crafted djvu file may lead to application crash and other consequences.
Affected products
n/a · djvulibre