CVE-2019-18804: Null Pointer Dereference
DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filterfv at IW44EncodeCodec.cpp.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-18804?
CVE-2019-18804 is a vulnerability in DjVuLibre 3.5.27 that allows for a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.
What is the severity of CVE-2019-18804?
The severity of CVE-2019-18804 is high with a CVSS score of 7.5.
Which software versions are affected by CVE-2019-18804?
DjVuLibre versions 3.5.27.1-13, 3.5.27.1-10, and 3.5.27.1-7 are affected by CVE-2019-18804.
How do I fix CVE-2019-18804?
To fix CVE-2019-18804, update the affected DjVuLibre software to version 3.5.27.1-13+deb10u1, 3.5.28-2, 3.5.27.1-8ubuntu0.1, 3.5.27.1-10ubuntu0.1, 3.5.27.1-13ubuntu0.1, 3.5.27.1-5ubuntu0.1, or a later version.
Where can I find more information about CVE-2019-18804?
More information about CVE-2019-18804 can be found at the following references: [Link 1](https://sourceforge.net/p/djvu/bugs/309/), [Link 2](https://security-tracker.debian.org/tracker/CVE-2019-18804), [Link 3](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18804)