{"id":"CVE-2019-18804","aliases":["DEBIAN-CVE-2019-18804","DLA-1985-1","DLA-2667-1","DSA-5032-1","EUVD-2019-8508","GHSA-mgvj-94j9-x737","MGASA-2019-0346","OESA-2021-1034","SUSE-SU-2019:3033-1","SUSE-SU-2019:3033-2","SUSE-SU-2020:0970-1","SUSE-SU-2021:1645-1","UBUNTU-CVE-2019-18804","USN-4198-1","openSUSE-SU-2019:2574-1","openSUSE-SU-2019:2576-1","openSUSE-SU-2024:10719-1"],"status":"published","title":"DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at...","description":"DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03667,"percentile":0.89721,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2019-11-07T05:25:46Z","modified":"2026-09-21T07:03:11Z","fixes":[{"ecosystem":"Debian:12","package":"djvulibre","fixed_in":["3.5.27.1-14"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"djvulibre","fixed_in":["3.5.27.1-14"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"djvulibre","fixed_in":["3.5.27.1-14"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"djvulibre","fixed_in":["3.5.25.4-4+deb8u2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"djvulibre","fixed_in":["3.5.27-3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"djvulibre","fixed_in":["3.5.27-3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15","package":"djvulibre","fixed_in":["3.5.27-3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP1","package":"djvulibre","fixed_in":["3.5.27-3.8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"djvulibre","fixed_in":["3.5.25.3-5.6.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"djvulibre","fixed_in":["3.5.25.3-5.6.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"djvulibre","fixed_in":["3.5.25.3-5.6.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"djvulibre","fixed_in":["3.5.25.3-5.6.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"djvulibre","fixed_in":["3.5.25.3-5.6.10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"djvulibre","fixed_in":["3.5.25.3-5.6.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"djvulibre","fixed_in":["3.5.27.1-5ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"djvulibre","fixed_in":["3.5.27.1-8ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"djvulibre","fixed_in":["3.5.27-lp150.2.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"djvulibre","fixed_in":["3.5.27-lp151.3.6.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27.1-14"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27.1-14"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27.1-14"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.25.4-4+deb8u2"}]}],"versions":["3.5.25.4-4","3.5.25.4-4+deb8u1"]},{"source":"osv","ecosystem":"Debian:9","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27.1-7+deb9u1"}]}],"versions":["3.5.27.1-7"],"bundled":10},{"source":"osv","ecosystem":"Debian:10","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27.1-10+deb10u1"}]}],"versions":["3.5.27.1-10"],"bundled":11},{"source":"osv","ecosystem":"Mageia:7","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-5.1.mga7"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:20.03-LTS","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-15.oe1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-15.oe1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP1","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-3.8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.25.3-5.6.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.25.3-5.6.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.25.3-5.6.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.25.3-5.6.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.25.3-5.6.10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.25.3-5.6.10"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.25.3-5.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.25.3-5.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.25.3-5.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.25.3-5.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.25.3-5.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.25.3-5.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.25.3-5.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.25.3-5.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.25.3-5.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.25.3-5.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.25.3-5.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.25.3-5.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.25.3-5.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.25.3-5.9.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27.1-5ubuntu0.1"}]}],"versions":["3.5.27.1-3","3.5.27.1-4","3.5.27.1-5"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27.1-8ubuntu0.1"}]}],"versions":["3.5.27.1-7","3.5.27.1-8"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27.1-5ubuntu0.1"}]}],"versions":["3.5.27.1-3","3.5.27.1-4","3.5.27.1-5"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27.1-8ubuntu0.1"}]}],"versions":["3.5.27.1-7","3.5.27.1-8"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-lp150.2.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.27-lp151.3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"djvulibre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.28-3.2"}]}],"bundled":10}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"djvulibre_project","product":"djvulibre"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"opensuse","product":"leap"}],"references":[{"url":"https://sourceforge.net/p/djvu/bugs/309/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://github.com/TeamSeri0us/pocs/blob/master/djvulibre/DJVU__filter_fv%40IW44EncodeCodec.cpp_499-43___SEGV_UNKNOW.md","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/11/msg00004.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4198-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00068.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00069.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/05/msg00022.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2021/dsa-5032","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-18804","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JO65AWU7LEWNF6DDCZPRFTR2ZPP5XK6L/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NYPWP5T7TSUNZV4UEIRRCTVWO6VBZWJV/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QUEME45HVGTMDOYODAZYQOGWSZ2CEFWZ/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SWT7E7BMWV5T33AMU6OGDPPTPIGCFFZF/"},{"url":"https://github.com/advisories/GHSA-mgvj-94j9-x737"},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-18804","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0346.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25730","tags":["report"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1034","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15145","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15142","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15143","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15144","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193033-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1154401","tags":["report"]},{"url":"https://bugzilla.suse.com/1156188","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-18804","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20193033-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200970-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211645-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1185900","tags":["report"]},{"url":"https://bugzilla.suse.com/1185904","tags":["report"]},{"url":"https://bugzilla.suse.com/1185905","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32493","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-18804","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4198-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-18804","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-15142","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-15143","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-15144","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-15145","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QAQFMGLTFKVFKOBMQTFNGOIBKHRNNCDK/#QAQFMGLTFKVFKOBMQTFNGOIBKHRNNCDK","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VBXTUDPDXNGZTLXYDTZ3ZHANL3FPHD3Z/#VBXTUDPDXNGZTLXYDTZ3ZHANL3FPHD3Z","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-32490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3500","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-18804","description":"DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.","status":"published","published":"2019-11-07T05:25:46Z","modified":"2024-08-05T02:02:39.495Z","updated_at":"2026-11-02T14:32:23.803059Z"}],"euvd":[{"id":"EUVD-2019-8508","description":"DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.","status":"published","published":"2019-11-07T05:25:46Z","modified":"2024-08-05T02:02:39Z","updated_at":"2026-11-03T02:40:27.303586Z"}],"ghsa":[{"id":"GHSA-mgvj-94j9-x737","title":"DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at...","description":"DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.","status":"published","published":"2022-05-24T17:00:38Z","modified":"2023-01-28T05:08:10Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:44:36.474417Z"}],"nvd":[{"id":"CVE-2019-18804","description":"DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.","status":"published","published":"2019-11-07T06:15:10.653Z","modified":"2026-06-17T02:25:21.98Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:05:35.052973Z"}],"osv":[{"id":"CVE-2019-18804","description":"DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.","status":"published","published":"2019-11-07T06:15:10.653Z","modified":"2026-04-16T04:31:21.336804968Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:11.673963Z"},{"id":"DEBIAN-CVE-2019-18804","description":"DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.","status":"published","published":"2019-11-07T06:15:10.653Z","modified":"2026-09-21T07:03:11.293820698Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:31.867036Z"},{"id":"OESA-2021-1034","title":"djvulibre security update","description":"DjVu is a set of compression technologies, a file format, and a software platform for the deliveryover the Web of digital documents, scanned documents, and high resolution images.DjVu documents download and display extremely quickly, and look exactly the same on all platforms with no compatibility problems due to fonts, colors, etc. DjVu can be seen as a superior alternative to PDF and PostScript for digital documents, to TIFF (and PDF) for scanned bitonal documents, to JPEG and JPEG2000 for photographs and pictures, and to GIF for large palettized images. DjVu is the only Web format that is practical for distributing high-resolution scanned documents in color.\n\r\nSecurity Fix(es):\n\r\nDjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.(CVE-2019-18804)\n\r\nDjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack (application crash via an out-of-bounds read) by crafting a corrupted JB2 image file that is mishandled in JB2Dict::JB2Codec::get_direct_context in libdjvu/JB2Image.h because of a missing zero-bytes check in libdjvu/GBitmap.h.(CVE-2019-15145)\n\nIn DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service (application crash in GStringRep::strdup in libdjvu/GString.cpp caused by a heap-based buffer over-read) by crafting a DJVU file.(CVE-2019-15142)\n\nIn DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error (resource exhaustion caused by a GBitmap::read_rle_raw infinite loop) by crafting a corrupted image file, related to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp.(CVE-2019-15143)\n\nIn DjVuLibre 3.5.27, the sorting functionality allows attackers to cause a denial-of-service (application crash due to an Uncontrolled Recursion) by crafting a PBM image file that is mishandled in libdjvu/GContainer.h.(CVE-2019-15144)","status":"published","published":"2021-02-07T11:04:16Z","modified":"2026-08-18T01:15:06.105150002Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"UBUNTU-CVE-2019-18804","description":"DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.","status":"published","published":"2019-11-07T06:15:00Z","modified":"2026-04-22T12:13:43.927828Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:20.325378Z"},{"id":"DLA-1985-1","title":"djvulibre - security update","status":"published","published":"2019-11-08T00:00:00Z","modified":"2026-03-09T01:21:08.837736Z","updated_at":"2026-11-02T15:46:10.227108Z"},{"id":"DLA-2667-1","title":"djvulibre - security update","status":"published","published":"2021-05-26T00:00:00Z","modified":"2026-03-09T01:21:23.273726Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-5032-1","title":"djvulibre - security update","status":"published","published":"2021-12-28T00:00:00Z","modified":"2026-03-09T02:11:06.357921Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2019-0346","title":"Updated djvulibre packages fix security vulnerabilities","description":"The updated packages fix security vulnerabilities:\n\nIn DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows\nattackers to cause a denial-of-service (application crash in\nGStringRep::strdup in libdjvu/GString.cpp caused by a heap-based buffer\nover-read) by crafting a DJVU file. (CVE-2019-15142)\n\nIn DjVuLibre 3.5.27, the bitmap reader component allows attackers to\ncause a denial-of-service error (resource exhaustion caused by a\nGBitmap::read_rle_raw infinite loop) by crafting a corrupted image file,\nrelated to libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp. (CVE-2019-15143)\n\nIn DjVuLibre 3.5.27, the sorting functionality (aka \nGArrayTemplate\u003cTYPE\u003e::sort) allows attackers to cause a denial-of-service\n(application crash due to an Uncontrolled Recursion) by crafting a PBM\nimage file that is mishandled in libdjvu/GContainer.h. (CVE-2019-15144)\n\nDjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack\n(application crash via an out-of-bounds read) by crafting a corrupted JB2\nimage file that is mishandled in JB2Dict::JB2Codec::get_direct_context in\nlibdjvu/JB2Image.h because of a missing zero-bytes check in\nlibdjvu/GBitmap.h. (CVE-2019-15145)\n\nDjVuLibre 3.5.27 has a NULL pointer dereference in the function \nDJVU::filter_fv at IW44EncodeCodec.cpp. (CVE-2019-18804)\n","status":"published","published":"2019-11-30T13:06:06Z","modified":"2026-04-16T04:42:55.483323181Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2019:2574-1","title":"Security update for djvulibre","description":"This update for djvulibre fixes the following issues:\n\nSecurity issue fixed: \n\n- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).\n\nOther issue addressed: \n- Fixed a crash when mmx was enabled (bsc#1154401)\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-11-26T23:22:22Z","modified":"2025-05-07T18:10:54.720452Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2019:2576-1","title":"Security update for djvulibre","description":"This update for djvulibre fixes the following issues:\n\nSecurity issue fixed: \n\n- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).\n\nOther issue addressed: \n- Fixed a crash when mmx was enabled (bsc#1154401)\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-11-27T05:20:36Z","modified":"2026-02-04T04:21:09.277549Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:10719-1","title":"djvulibre-3.5.28-3.2 on GA media","description":"These are all security issues fixed in the djvulibre-3.5.28-3.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:11:13.765906Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2019:3033-1","title":"Security update for djvulibre","description":"This update for djvulibre fixes the following issues:\n\nSecurity issue fixed: \n\n- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).\n\nOther issue addressed: \n- Fixed a crash when mmx was enabled (bsc#1154401)","status":"published","published":"2019-11-21T18:12:35Z","modified":"2026-02-04T02:24:24.038569Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:3033-2","title":"Security update for djvulibre","description":"This update for djvulibre fixes the following issues:\n\nSecurity issue fixed: \n\n- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).\n\nOther issue addressed: \n- Fixed a crash when mmx was enabled (bsc#1154401)","status":"published","published":"2020-07-07T11:41:22Z","modified":"2026-02-04T02:43:02.85071Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0970-1","title":"Security update for djvulibre","description":"This update for djvulibre fixes the following issues:\n\t  \n- CVE-2019-18804: Fixed a null pointer dereference (bsc#1156188).\n\n","status":"published","published":"2020-04-09T10:50:08Z","modified":"2026-02-04T02:31:45.597381Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2021:1645-1","title":"Security update for djvulibre","description":"This update for djvulibre fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2021-32491 [bsc#1185900]: Integer overflow in function render() in tools/ddjvu via crafted djvu file\n- CVE-2021-32492 [bsc#1185904]: Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file\n- CVE-2021-32493 [bsc#1185905]: Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file\n","status":"published","published":"2021-05-19T11:54:30Z","modified":"2026-02-04T03:46:18.216308Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"USN-4198-1","title":"djvulibre vulnerabilities","description":"It was discovered that DjVuLibre incorrectly handled certain memory\noperations. If a user or automated system were tricked into processing a\nspecially crafted DjVu file, a remote attacker could cause applications\nto hang or crash, resulting in a denial of service, or possibly execute\narbitrary code.\n","status":"published","published":"2019-11-21T19:29:42Z","modified":"2026-04-22T10:02:16.739905Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}