CVE-2021-46312

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Aug 22, 2023
Updated: Jun 10, 2024
CWE ID 369

Summary

CVE-2021-46312 is a denial-of-service vulnerability affecting the IW44EncodeCodec.cpp file in djvulibre 3.5.28. An attacker can exploit this issue by inducing a divide-by-zero error, resulting in the application crashing or becoming unresponsive, thus causing a denial-of-service condition. This vulnerability could potentially be exploited to disrupt services that rely on djvulibre for image processing. Users are advised to update to the latest version of djvulibre to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share