CVE-2019-15144

Name of the Vulnerable Software and Affected Versions DjVuLibre version 3.5.27

Description The issue is related to the sorting functionality in DjVuLibre, which can be exploited by crafting a malicious PBM image file. This can cause an uncontrolled recursion, leading to a denial-of-service (application crash). The vulnerability can be exploited by a remote attacker to disrupt service.

Recommendations For DjVuLibre version 3.5.27, consider disabling the sorting functionality (GArrayTemplate::sort) as a temporary workaround until a patch is available. Restrict access to the libdjvu/GContainer.h module to minimize the risk of exploitation. Avoid using the sorting functionality with untrusted PBM image files until the issue is resolved.