CVE-2019-15142 PUBLISHED

In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service (application crash in GStringRep::strdup in libdjvu/GString.cpp caused by a heap-based buffer over-read) by crafting a DJVU file.

EPSS 0.88% · 75.2th percentile

Risk Scores

EPSS Score
0.88%
75.2th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSdjvulibre0, 3.5.27.1-7, 3.5.27.1-8
Ubuntu:16.04:LTSdjvulibre0, 3.5.27.1-5, 3.5.27.1-3

Timeline

References

Open in Interactive Console →