CVE-2021-46312
published 2023-08-22CVE-2021-46312: An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero.
PriorityP423medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
EPSS
0.87%
54.7th percentile
An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | djvulibre | < djvulibre 3.5.28-2.2~deb12u1 (bookworm) | djvulibre 3.5.28-2.2~deb12u1 (bookworm) |
| djvulibre_project | djvulibre | — | — |
| djvulibre_project | djvulibre | >= 0 < 3.5.28-2.2~deb11u1 | 3.5.28-2.2~deb11u1 |
| djvulibre_project | djvulibre | >= 0 < 3.5.28-2.2~deb12u1 | 3.5.28-2.2~deb12u1 |
| djvulibre_project | djvulibre | >= 0 < 3.5.28-2.2 | 3.5.28-2.2 |
| djvulibre_project | djvulibre | >= 0 < 3.5.28-2.2 | 3.5.28-2.2 |
| djvulibre_project | djvulibre | >= 0 < 3.5.28-2ubuntu0.22.04.2 | 3.5.28-2ubuntu0.22.04.2 |
| djvulibre_project | djvulibre | >= 0 < 3.5.28-2ubuntu0.24.04.2 | 3.5.28-2ubuntu0.24.04.2 |
| djvulibre_project | djvulibre | >= 0 < 3.5.27.1-5ubuntu0.1+esm3 | 3.5.27.1-5ubuntu0.1+esm3 |
| djvulibre_project | djvulibre | >= 0 < 3.5.27.1-8ubuntu0.4+esm1 | 3.5.27.1-8ubuntu0.4+esm1 |
| djvulibre_project | djvulibre | >= 0 < 3.5.27.1-14ubuntu0.1+esm1 | 3.5.27.1-14ubuntu0.1+esm1 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv6.5MEDIUM
vendor_debian6.5MEDIUM
vendor_ubuntu6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
DjVuLibre vulnerabilities
vendor_ubuntu·2026-02-23·CVSS 6.5
CVE-2021-46312 [MEDIUM] DjVuLibre vulnerabilities
Title: DjVuLibre vulnerabilities
Summary: Several security issues were fixed in DjVuLibre.
It was discovered that DjVuLibre could be forced to execute a division
by zero in certain instances. A remote attacker could possibly use
this issue to cause applications to stop responding or crash, resulting
in a denial of service. (CVE-2021-46312)
It was discovered that DjVuLibre incorrectly handled certain memory
operations. If a user or automated system were tricked into processing a
specially crafted DjVu file, a remote attacker could cause applications
to stop responding or crash, resulting in a denial of service, or possibly
execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu
18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2025-53367)
Instructions: In general, a standard syste
Debian
CVE-2021-46312: djvulibre - An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attack...
vendor_debian·2021·CVSS 6.5
CVE-2021-46312 [MEDIUM] CVE-2021-46312: djvulibre - An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attack...
An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero.
Scope: local
bookworm: resolved (fixed in 3.5.28-2.2~deb12u1)
bullseye: resolved (fixed in 3.5.28-2.2~deb11u1)
forky: resolved (fixed in 3.5.28-2.2)
sid: resolved (fixed in 3.5.28-2.2)
trixie: resolved (fixed in 3.5.28-2.2)
OSV
djvulibre vulnerabilities
osv·2026-02-23·CVSS 6.5
CVE-2021-46312 [MEDIUM] djvulibre vulnerabilities
djvulibre vulnerabilities
It was discovered that DjVuLibre could be forced to execute a division
by zero in certain instances. A remote attacker could possibly use
this issue to cause applications to stop responding or crash, resulting
in a denial of service. (CVE-2021-46312)
It was discovered that DjVuLibre incorrectly handled certain memory
operations. If a user or automated system were tricked into processing a
specially crafted DjVu file, a remote attacker could cause applications
to stop responding or crash, resulting in a denial of service, or possibly
execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu
18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2025-53367)
OSV
CVE-2021-46312: An issue was discovered IW44EncodeCodec
osv·2023-08-22·CVSS 6.5
CVE-2021-46312 [MEDIUM] CVE-2021-46312: An issue was discovered IW44EncodeCodec
An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero.
GHSA
GHSA-mqm4-pwjf-gw24: An issue was discovered IW44EncodeCodec
ghsa_unreviewed·2023-08-22
CVE-2021-46312 [MEDIUM] CWE-369 GHSA-mqm4-pwjf-gw24: An issue was discovered IW44EncodeCodec
An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4APFAWR7QE27GXQMRKR6XKNZWWUJ5YMH/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HN4JOIBNMJMW2NQSGT6DCDCQZJ2ROFM7/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XEEGAR4WUF6LTOJEHSON7I2MBTPFTVR5/https://sourceforge.net/p/djvu/bugs/344/https://lists.debian.org/debian-lts-announce/2025/07/msg00007.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4APFAWR7QE27GXQMRKR6XKNZWWUJ5YMH/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HN4JOIBNMJMW2NQSGT6DCDCQZJ2ROFM7/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XEEGAR4WUF6LTOJEHSON7I2MBTPFTVR5/https://lists.fedoraproject.org/archives/list/[email protected]/message/HN4JOIBNMJMW2NQSGT6DCDCQZJ2ROFM7/https://lists.fedoraproject.org/archives/list/[email protected]/message/XEEGAR4WUF6LTOJEHSON7I2MBTPFTVR5/https://sourceforge.net/p/djvu/bugs/344/
2023-08-22
Published