CVE-2021-32490: Buffer Overflow
A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filterbv() via crafted djvu file may lead to application crash and other consequences.
Other sources
A flaw was found in latest djvulibre. An out of bounds write in function DJVU::filterbv() via crafted djvu file may lead to application crash and other consequences.
References:
https://bugzilla.redhat.com/showbug.cgi?id=1943408
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-32490?
CVE-2021-32490 is a vulnerability in djvulibre-3.5.28 and earlier versions that allows for an out of bounds write via a crafted djvu file, leading to application crashes.
How severe is CVE-2021-32490?
CVE-2021-32490 has a severity rating of 7.8 (high).
Which software is affected by CVE-2021-32490?
The affected software includes djvulibre-3.5.28 and earlier versions, Djvulibre Project Djvulibre, and Debian Linux versions 10.0 and 11.0.
How can I fix CVE-2021-32490?
To fix CVE-2021-32490, you should update your djvulibre package to version 3.5.27.1-10+deb10u1 or version 3.5.28-2, depending on your system.
Where can I find more information about CVE-2021-32490?
You can find more information about CVE-2021-32490 in the following references: [1] Bugzilla, [2] SourceForge, [3] Debian Security Tracker.