CVE-2017-12444: Minidjvu Project Minidjvu

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

The mdjvu_bitmap_get_bounding_box function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service (invalid memory read and application crash) via a crafted djvu file.

Affected products

• Minidjvu Project Minidjvu: version 0.8 only

Published 2017-08-17. Last modified 2026-06-17.