CVE-2021-32491

Name of the Vulnerable Software and Affected Versions DjVuLibre versions 3.5.28 and earlier

Description The issue is related to an integer overflow in the render() function in the tools/ddjvu component of DjVuLibre. This can be exploited by a remote attacker using a crafted djvu file, potentially leading to an application crash and other consequences.

Recommendations For DjVuLibre versions 3.5.28 and earlier, consider disabling the render() function in tools/ddjvu as a temporary workaround until a patch is available. Restrict the use of crafted djvu files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.