Vulnerabilities > CVE-2021-3630 - Out-of-bounds Write vulnerability in multiple products

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

NVD

Published: 2021-06-30

Updated: 2023-11-07

Summary

An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText.cpp via a crafted djvu file which may lead to crash and segmentation fault. This flaw affects DjVuLibre versions prior to 3.5.28.

Vulnerable Configurations

Part	Description	Count
Application	Djvulibre_Project Djvulibre Project Djvulibre 3.5.1 Djvulibre Project Djvulibre 3.5.2 Djvulibre Project Djvulibre 3.5.3 Djvulibre Project Djvulibre 3.5.4 Djvulibre Project Djvulibre 3.5.5 Djvulibre Project Djvulibre 3.5.6 Djvulibre Project Djvulibre 3.5.7 Djvulibre Project Djvulibre 3.5.8 Djvulibre Project Djvulibre 3.5.9 Djvulibre Project Djvulibre 3.5.10 Djvulibre Project Djvulibre 3.5.11 Djvulibre Project Djvulibre 3.5.12 Djvulibre Project Djvulibre 3.5.13 Djvulibre Project Djvulibre 3.5.14 Djvulibre Project Djvulibre 3.5.15 Djvulibre Project Djvulibre 3.5.16 Djvulibre Project Djvulibre 3.5.17 Djvulibre Project Djvulibre 3.5.18 Djvulibre Project Djvulibre 3.5.19 Djvulibre Project Djvulibre 3.5.20 Djvulibre Project Djvulibre 3.5.21 Djvulibre Project Djvulibre 3.5.22 Djvulibre Project Djvulibre 3.5.23 Djvulibre Project Djvulibre 3.5.24 Djvulibre Project Djvulibre 3.5.25 Djvulibre Project Djvulibre 3.5.27	26
OS	Debian Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0	3
OS	Fedoraproject Fedoraproject Fedora 33 Fedoraproject Fedora 34	2

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References