CVE-2025-53367

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-53367
CVSS

No CVSS.

D

jVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanruns method is affected by an OOB-write vulnerability, because it does not check that the xr pointer stays within the bounds of the allocated buffer. This can lead to writes beyond the allocated memory, resulting in a heap corruption condition. An out-of-bounds read with pr is also possible for the same reason. This issue has been patched in version 3.5.29.

References
Link Resource
https://github.blog/security/vulnerability-research/cve-2025-53367-an-exploitable-out-of-bounds-write-in-djvulibre
https://github.com/github/securitylab/tree/main/SecurityExploits/DjVuLibre/MMRDecoder_scanruns_CVE-2025-53367
https://securitylab.github.com/advisories/GHSL-2025-055_DjVuLibre/
https://sourceforge.net/p/djvu/djvulibre-git/ci/33f645196593d70bd5e37f55b63886c31c82c3da
https://www.openwall.com/lists/oss-security/2025/07/03/1
http://www.openwall.com/lists/oss-security/2025/07/03/1
http://www.openwall.com/lists/oss-security/2025/07/18/3
https://lists.debian.org/debian-lts-announce/2025/07/msg00007.html
https://github.blog/security/vulnerability-research/cve-2025-53367-an-exploitable-out-of-bounds-write-in-djvulibre/
Configurations

No configuration.

History

04 Nov 2025, 22:16

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2025/07/03/1 -
  • () http://www.openwall.com/lists/oss-security/2025/07/18/3 -

03 Nov 2025, 20:19

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/07/msg00007.html -

18 Jul 2025, 16:15

Type Values Removed Values Added
References
  • () https://github.com/github/securitylab/tree/main/SecurityExploits/DjVuLibre/MMRDecoder_scanruns_CVE-2025-53367 -

08 Jul 2025, 15:15

Type Values Removed Values Added
Summary
  • (es) DjVuLibre es una implementación GPL de DjVu, un formato web para distribuir documentos e imágenes. Antes de la versión 3.5.29, el método MMRDecoder::scanruns presentaba una vulnerabilidad de escritura fuera de banda (OOB), ya que no comprobaba que el puntero xr se mantuviera dentro de los límites del búfer asignado. Esto podía provocar escrituras fuera de la memoria asignada, lo que resultaba en una condición de corrupción del montón. Una lectura fuera de los límites con pr también era posible por la misma razón. Este problema se ha corregido en la versión 3.5.29.
References
  • () https://github.blog/security/vulnerability-research/cve-2025-53367-an-exploitable-out-of-bounds-write-in-djvulibre/ -

03 Jul 2025, 22:15

Type Values Removed Values Added
References
  • {'url': 'https://github.blog/security/vulnerability-research/cve-2025-53367-an-exploitable-out-of-bounds-write-in-djvulibre/', 'source': '[email protected]'}
  • () https://github.blog/security/vulnerability-research/cve-2025-53367-an-exploitable-out-of-bounds-write-in-djvulibre -
  • () https://securitylab.github.com/advisories/GHSL-2025-055_DjVuLibre/ -

03 Jul 2025, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-03 21:15

Updated : 2025-11-04 22:16

NVD link : CVE-2025-53367

Mitre link : CVE-2025-53367

CVE.ORG link : CVE-2025-53367

JSON object : View

Products Affected

No product.

CWE
CWE-125

Out-of-bounds Read

CWE-787

Out-of-bounds Write