CVE-2025-53367 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-53367 Interim 1 4 2026-03-05T00:31:06Z current 2025-07-12T06:33:47Z 2026-03-05T00:31:06Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-53367 DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanruns method is affected by an OOB-write vulnerability, because it does not check that the xr pointer stays within the bounds of the allocated buffer. This can lead to writes beyond the allocated memory, resulting in a heap corruption condition. An out-of-bounds read with pr is also possible for the same reason. This issue has been patched in version 3.5.29. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-updates/2025-August/041103.html E-Mail link for SUSE-SU-2025:02695-1 https://lists.suse.com/pipermail/sle-updates/2025-August/041099.html E-Mail link for SUSE-SU-2025:02703-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES-LTSS-TERADATA 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Module for Package Hub 15 SP6 SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP4-TERADATA SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 openSUSE Leap 15.6 openSUSE Tumbleweed djvulibre djvulibre-3.5.27-150200.11.17.1 djvulibre-3.5.28-160000.2.2 djvulibre-3.5.29-1.1 djvulibre-doc-3.5.27-150200.11.17.1 djvulibre-doc-3.5.28-160000.2.2 djvulibre-doc-3.5.29-1.1 libdjvulibre-devel libdjvulibre-devel-3.5.25.3-5.25.1 libdjvulibre-devel-3.5.27-150200.11.17.1 libdjvulibre-devel-3.5.28-160000.2.2 libdjvulibre-devel-3.5.29-1.1 libdjvulibre21 libdjvulibre21-3.5.25.3-5.25.1 libdjvulibre21-3.5.27-150200.11.17.1 libdjvulibre21-3.5.28-160000.2.2 libdjvulibre21-3.5.29-1.1 libdjvulibre-devel-3.5.27-150200.11.17.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 libdjvulibre21-3.5.27-150200.11.17.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6 libdjvulibre-devel-3.5.27-150200.11.17.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 libdjvulibre21-3.5.27-150200.11.17.1 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 djvulibre-3.5.27-150200.11.17.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 djvulibre-3.5.27-150200.11.17.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 libdjvulibre21-3.5.25.3-5.25.1 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA libdjvulibre-devel-3.5.27-150200.11.17.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA libdjvulibre21-3.5.27-150200.11.17.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA djvulibre-3.5.28-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 djvulibre-doc-3.5.28-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libdjvulibre-devel-3.5.28-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libdjvulibre21-3.5.28-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 libdjvulibre-devel-3.5.25.3-5.25.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 libdjvulibre21-3.5.25.3-5.25.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 djvulibre-3.5.27-150200.11.17.1 as a component of openSUSE Leap 15.6 djvulibre-doc-3.5.27-150200.11.17.1 as a component of openSUSE Leap 15.6 libdjvulibre-devel-3.5.27-150200.11.17.1 as a component of openSUSE Leap 15.6 libdjvulibre21-3.5.27-150200.11.17.1 as a component of openSUSE Leap 15.6 djvulibre-3.5.29-1.1 as a component of openSUSE Tumbleweed djvulibre-doc-3.5.29-1.1 as a component of openSUSE Tumbleweed libdjvulibre-devel-3.5.29-1.1 as a component of openSUSE Tumbleweed libdjvulibre21-3.5.29-1.1 as a component of openSUSE Tumbleweed djvulibre as a component of SLES-LTSS-TERADATA 15 SP2 libdjvulibre-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libdjvulibre21 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS djvulibre as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libdjvulibre-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libdjvulibre21 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS djvulibre as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS libdjvulibre-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS libdjvulibre21 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS djvulibre as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS libdjvulibre-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS libdjvulibre21 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS djvulibre as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS djvulibre as a component of SUSE Linux Enterprise Server 11 SP4 LTSS libdjvulibre21 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS djvulibre as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libdjvulibre21 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS djvulibre as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libdjvulibre-devel as a component of SUSE Linux Enterprise Server 12 SP5-LTSS libdjvulibre21 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS djvulibre as a component of SUSE Linux Enterprise Server 12 SP5-LTSS libdjvulibre-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libdjvulibre21 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS djvulibre as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libdjvulibre-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libdjvulibre21 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS djvulibre as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libdjvulibre-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libdjvulibre21 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS djvulibre as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libdjvulibre-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libdjvulibre21 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS djvulibre as a component of SUSE Linux Enterprise Server 15 SP4-LTSS libdjvulibre-devel as a component of SUSE Linux Enterprise Server 15 SP5-LTSS libdjvulibre21 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS djvulibre as a component of SUSE Linux Enterprise Server 15 SP5-LTSS libdjvulibre-devel as a component of SUSE Linux Enterprise Server 15-LTSS libdjvulibre21 as a component of SUSE Linux Enterprise Server 15-LTSS djvulibre as a component of SUSE Linux Enterprise Server 15-LTSS libdjvulibre-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libdjvulibre21 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 djvulibre as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libdjvulibre-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libdjvulibre21 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 djvulibre as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 libdjvulibre-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 libdjvulibre21 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 djvulibre as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 DjVuLibre is a GPL implementation of DjVu, a web-centric format for distributing documents and images. Prior to version 3.5.29, the MMRDecoder::scanruns method is affected by an OOB-write vulnerability, because it does not check that the xr pointer stays within the bounds of the allocated buffer. This can lead to writes beyond the allocated memory, resulting in a heap corruption condition. An out-of-bounds read with pr is also possible for the same reason. This issue has been patched in version 3.5.29. CVE-2025-53367 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libdjvulibre-devel-3.5.27-150200.11.17.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libdjvulibre21-3.5.27-150200.11.17.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:libdjvulibre-devel-3.5.27-150200.11.17.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP7:libdjvulibre21-3.5.27-150200.11.17.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:djvulibre-3.5.27-150200.11.17.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:djvulibre-3.5.27-150200.11.17.1 SUSE Linux Enterprise Server 12 SP3-TERADATA:libdjvulibre21-3.5.25.3-5.25.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:libdjvulibre-devel-3.5.27-150200.11.17.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:libdjvulibre21-3.5.27-150200.11.17.1 SUSE Linux Enterprise Server 16.0:djvulibre-3.5.28-160000.2.2 SUSE Linux Enterprise Server 16.0:djvulibre-doc-3.5.28-160000.2.2 SUSE Linux Enterprise Server 16.0:libdjvulibre-devel-3.5.28-160000.2.2 SUSE Linux Enterprise Server 16.0:libdjvulibre21-3.5.28-160000.2.2 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libdjvulibre-devel-3.5.25.3-5.25.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libdjvulibre21-3.5.25.3-5.25.1 openSUSE Leap 15.6:djvulibre-3.5.27-150200.11.17.1 openSUSE Leap 15.6:djvulibre-doc-3.5.27-150200.11.17.1 openSUSE Leap 15.6:libdjvulibre-devel-3.5.27-150200.11.17.1 openSUSE Leap 15.6:libdjvulibre21-3.5.27-150200.11.17.1 openSUSE Tumbleweed:djvulibre-3.5.29-1.1 openSUSE Tumbleweed:djvulibre-doc-3.5.29-1.1 openSUSE Tumbleweed:libdjvulibre-devel-3.5.29-1.1 openSUSE Tumbleweed:libdjvulibre21-3.5.29-1.1 moderate 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H