description: An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText.cpp via a crafted djvu file which may lead to crash and segmentation fault. This flaw affects DjVuLibre versions prior to 3.5.28.
problem types: CWE-787
affected:
{
product: djvulibre
vendor: n/a
versions:
status: affected, version: DjVuLibre 3.5.28
}