CVE-2021-3630: Debian Linux

Medium severity, CVSS 5.5. EPSS: 1% chance of exploitation in the next 30 days.

An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText.cpp via a crafted djvu file which may lead to crash and segmentation fault. This flaw affects DjVuLibre versions prior to 3.5.28.

Affected products

• Debian Debian Linux: version 9.0 only; version 10.0 only; version 11.0 only
• Djvulibre Project Djvulibre: before 3.5.28 (fixed in 3.5.28)
• Fedoraproject Fedora: version 33 only; version 34 only

Published 2021-06-30. Last modified 2026-06-17.