CVE-2019-15143

Name of the Vulnerable Software and Affected Versions DjVuLibre version 3.5.27

Description The bitmap reader component in DjVuLibre allows attackers to cause a denial-of-service error by crafting a corrupted image file. This is related to an infinite loop in the GBitmap::read rle raw function, which can lead to resource exhaustion. The issue is connected to the libdjvu/DjVmDir.cpp and libdjvu/GBitmap.cpp files.

Recommendations For DjVuLibre version 3.5.27, consider avoiding the use of corrupted image files to prevent exploitation of the denial-of-service error until a patch is available. As a temporary workaround, restricting access to the bitmap reader component may help minimize the risk of exploitation.