CVE Feed

    Dashboard / CVE / CVE-2021-46310

    CVE-2021-46310

    An issue was discovered IW44Image.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of service via divide by zero.

    Published:Aug 22, 2023
    Last Modified:Nov 4, 2025
    EPS:Aug 22, 2023
    EPSS Score:0.00171
    CVSS Score:6.5

    Affected Products

    Vendor
    Djvulibre Project
    Product
    Djvulibre

    Exploits

    https://sourceforge.net/p/djvu/bugs/345/https://sourceforge.net/p/djvu/bugs/345/

    Common Weakness Enumeration

    CWE-369 Divide By Zero

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2021-46312 (CVSS 6.5) — An issue was discovered IW44EncodeCodec.cpp in djvulibre 3.5.28 in allows attackers to cause a denial of servi…
    CVE-2021-3630 (CVSS 5.5) — An out-of-bounds write vulnerability was found in DjVuLibre in DJVU::DjVuTXT::decode() in DjVuText.cpp via a c…
    CVE-2021-32493 (CVSS 7.8) — A flaw was found in djvulibre-3.5.28 and earlier. A heap buffer overflow in function DJVU::GBitmap::decode() v…
    CVE-2021-32492 (CVSS 7.8) — A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds read in function DJVU::DataPool::has_data()…
    CVE-2021-32490 (CVSS 7.8) — A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filter_bv() via cra…
    CVE-2021-32491 (CVSS 7.8) — A flaw was found in djvulibre-3.5.28 and earlier. An integer overflow in function render() in tools/ddjvu via …
    CVE-2021-3500 (CVSS 7.8) — A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument::get_djvu_fi…
    CVE-2019-18804 (CVSS 7.5) — DjVuLibre 3.5.27 has a NULL pointer dereference in the function DJVU::filter_fv at IW44EncodeCodec.cpp.…
    CVE-2019-15142 (CVSS 5.5) — In DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial-of-service (a…
    CVE-2019-15143 (CVSS 5.5) — In DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service error (resource…

    References

    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4APFAWR7QE27GXQMRKR6XKNZWWUJ5YMH/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HN4JOIBNMJMW2NQSGT6DCDCQZJ2ROFM7/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XEEGAR4WUF6LTOJEHSON7I2MBTPFTVR5/
    https://sourceforge.net/p/djvu/bugs/345/
    https://lists.debian.org/debian-lts-announce/2025/07/msg00007.html
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4APFAWR7QE27GXQMRKR6XKNZWWUJ5YMH/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HN4JOIBNMJMW2NQSGT6DCDCQZJ2ROFM7/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XEEGAR4WUF6LTOJEHSON7I2MBTPFTVR5/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/HN4JOIBNMJMW2NQSGT6DCDCQZJ2ROFM7/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/XEEGAR4WUF6LTOJEHSON7I2MBTPFTVR5/
    https://sourceforge.net/p/djvu/bugs/345/

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High