CVE-2021-32493: Buffer Overflow
A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode() via crafted djvu file may lead to application crash and other consequences.
Other sources
A flaw was found in latest djavulibre. A heap buffer overflow in function DJVU::GBitmap::decode() via crafted djvu file may lead to application crash and other consequences.
References:
https://bugzilla.redhat.com/showbug.cgi?id=1943424
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-32493?
CVE-2021-32493 is a vulnerability in djvulibre-3.5.28 and earlier versions that allows a crafted djvu file to cause a heap buffer overflow, potentially leading to application crashes and other consequences.
How severe is CVE-2021-32493?
CVE-2021-32493 has a severity rating of 7.8, which is considered high.
Which software is affected by CVE-2021-32493?
The affected software includes djvulibre-3.5.28 and earlier versions.
How can I fix CVE-2021-32493?
To fix CVE-2021-32493, it is recommended to update your djvulibre package to version 3.5.28-2 or apply the provided patches for the affected versions.
Where can I find more information about CVE-2021-32493?
You can find more information about CVE-2021-32493 on Red Hat Bugzilla, SourceForge, and the Debian Security Tracker.