# CVE-2025-53367: djview: DjVuLibre is a GPL implementation of DjVu, a web-centric format fordistributing documents and images CVE-2025-53367 is fixed in 13 products on 1 platform, first by djview 3.5.27.1-8ubuntu0.4+esm1, released July 3, 2025. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2025-53367 - Priority: Routine - CVSS: n/a (Medium) - EPSS: 0.0087 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Jul 3, 2025 ## Description DjVuLibre is a GPL implementation of DjVu, a web-centric format fordistributing documents and images. Prior to version 3.5.29, theMMRDecoder::scanruns method is affected by an OOB-write vulnerability,because it does not check that the xr pointer stays within the bounds ofthe allocated buffer. This can lead to writes beyond the allocated memory,resulting in a heap corruption condition. An out-of-bounds read with pr isalso possible for the same reason. This issue has been patched in version3.5.29. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | djview Ubuntu 18.04.6 LTS (bionic) | 3.5.27.1-8ubuntu0.4+esm1 | [djview 3.5.27.1-8ubuntu0.4+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-djview-3.5.27.1-8ubuntu0.4-esm1.md) | Jul 3, 2025 | | Linux | djview Ubuntu 20.04 LTS (focal) | 3.5.27.1-14ubuntu0.1+esm1 | [djview 3.5.27.1-14ubuntu0.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-djview-3.5.27.1-14ubuntu0.1-esm1.md) | Jul 3, 2025 | | Linux | djview Ubuntu 22.04.1 LTS (jammy) | 3.5.28-2ubuntu0.22.04.1 | [djview 3.5.28-2ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-djview-3.5.28-2ubuntu0.22.04.1.md) | Jul 3, 2025 | | Linux | djview Ubuntu 24.04.5 LTS (noble) | 3.5.28-2ubuntu0.24.04.1 | [djview 3.5.28-2ubuntu0.24.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-djview-3.5.28-2ubuntu0.24.04.1.md) | Jul 3, 2025 | | Linux | djview Ubuntu 25.04 (plucky) | 3.5.28-2ubuntu0.25.04.1 | [djview 3.5.28-2ubuntu0.25.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-djview-3.5.28-2ubuntu0.25.04.1.md) | Jul 4, 2025 | | Linux | djview3 Ubuntu 18.04.6 LTS (bionic) | 3.5.27.1-8ubuntu0.4+esm1 | [djview3 3.5.27.1-8ubuntu0.4+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-djview3-3.5.27.1-8ubuntu0.4-esm1.md) | Jul 3, 2025 | | Linux | djview3 Ubuntu 20.04 LTS (focal) | 3.5.27.1-14ubuntu0.1+esm1 | [djview3 3.5.27.1-14ubuntu0.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-djview3-3.5.27.1-14ubuntu0.1-esm1.md) | Jul 3, 2025 | | Linux | djview3 Ubuntu 22.04.1 LTS (jammy) | 3.5.28-2ubuntu0.22.04.1 | [djview3 3.5.28-2ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-djview3-3.5.28-2ubuntu0.22.04.1.md) | Jul 3, 2025 | | Linux | djview3 Ubuntu 24.04.5 LTS (noble) | 3.5.28-2ubuntu0.24.04.1 | [djview3 3.5.28-2ubuntu0.24.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-djview3-3.5.28-2ubuntu0.24.04.1.md) | Jul 3, 2025 | | Linux | djview3 Ubuntu 25.04 (plucky) | 3.5.28-2ubuntu0.25.04.1 | [djview3 3.5.28-2ubuntu0.25.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-djview3-3.5.28-2ubuntu0.25.04.1.md) | Jul 4, 2025 | | Linux | djvulibre Debian 12.15 (bookworm) | 3.5.28-2.1~deb12u1 | [DSA-5960-1](https://patchblox.com/security/data/fix/linux/dsa-5960-1.md) | Jul 7, 2025 | | Linux | djvulibre Debian 13.5 (trixie) | 3.5.28-2.1 | [DEBIAN-CVE-2025-53367](https://patchblox.com/security/data/fix/linux/debian-cve-2025-53367.md) | Jul 3, 2025 | | Linux | djvulibre Debian 14 | 3.5.28-2.1 | [DEBIAN-CVE-2025-53367](https://patchblox.com/security/data/fix/linux/debian-cve-2025-53367.md) | Jul 3, 2025 | | Linux | djvulibre Fedora 43 | 3.5.30-1.fc43 | [FEDORA-2026-BFA185DBB3](https://patchblox.com/security/data/fix/linux/fedora-2026-bfa185dbb3.md) | May 21, 2026 | | Linux | djvulibre opensuse-leap 15.6 | 3.5.27-150200.11.17.1 | [SUSE-SU-2025:02703-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02703-1.md) | Aug 5, 2025 | | Linux | djvulibre sles 15.6 | 3.5.27-150200.11.17.1 | [SUSE-SU-2025:02703-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02703-1.md) | Aug 5, 2025 | | Linux | djvulibre sles 15.7 | 3.5.27-150200.11.17.1 | [SUSE-SU-2025:02703-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02703-1.md) | Aug 5, 2025 | | Linux | djvulibre-bin Ubuntu 18.04.6 LTS (bionic) | 3.5.27.1-8ubuntu0.4+esm1 | [djvulibre-bin 3.5.27.1-8ubuntu0.4+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-djvulibre-bin-3.5.27.1-8ubuntu0.4-esm1.md) | Jul 3, 2025 | | Linux | djvulibre-bin Ubuntu 20.04 LTS (focal) | 3.5.27.1-14ubuntu0.1+esm1 | [djvulibre-bin 3.5.27.1-14ubuntu0.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-djvulibre-bin-3.5.27.1-14ubuntu0.1-esm1.md) | Jul 3, 2025 | | Linux | djvulibre-bin Ubuntu 22.04.1 LTS (jammy) | 3.5.28-2ubuntu0.22.04.1 | [djvulibre-bin 3.5.28-2ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-djvulibre-bin-3.5.28-2ubuntu0.22.04.1.md) | Jul 3, 2025 | | Linux | djvulibre-bin Ubuntu 24.04.5 LTS (noble) | 3.5.28-2ubuntu0.24.04.1 | [djvulibre-bin 3.5.28-2ubuntu0.24.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-djvulibre-bin-3.5.28-2ubuntu0.24.04.1.md) | Jul 3, 2025 | | Linux | djvulibre-bin Ubuntu 25.04 (plucky) | 3.5.28-2ubuntu0.25.04.1 | [djvulibre-bin 3.5.28-2ubuntu0.25.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-djvulibre-bin-3.5.28-2ubuntu0.25.04.1.md) | Jul 4, 2025 | | Linux | djvulibre-debuginfo Fedora 43 | 3.5.30-1.fc43 | [FEDORA-2026-BFA185DBB3](https://patchblox.com/security/data/fix/linux/fedora-2026-bfa185dbb3.md) | May 21, 2026 | | Linux | djvulibre-debugsource Fedora 43 | 3.5.30-1.fc43 | [FEDORA-2026-BFA185DBB3](https://patchblox.com/security/data/fix/linux/fedora-2026-bfa185dbb3.md) | May 21, 2026 | | Linux | djvulibre-desktop Ubuntu 18.04.6 LTS (bionic) | 3.5.27.1-8ubuntu0.4+esm1 | [djvulibre-desktop 3.5.27.1-8ubuntu0.4+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-djvulibre-desktop-3.5.27.1-8ubuntu0.4-esm1.md) | Jul 3, 2025 | | Linux | djvulibre-desktop Ubuntu 20.04 LTS (focal) | 3.5.27.1-14ubuntu0.1+esm1 | [djvulibre-desktop 3.5.27.1-14ubuntu0.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-djvulibre-desktop-3.5.27.1-14ubuntu0.1-esm1.md) | Jul 3, 2025 | | Linux | djvulibre-desktop Ubuntu 22.04.1 LTS (jammy) | 3.5.28-2ubuntu0.22.04.1 | [djvulibre-desktop 3.5.28-2ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-djvulibre-desktop-3.5.28-2ubuntu0.22.04.1.md) | Jul 3, 2025 | | Linux | djvulibre-desktop Ubuntu 24.04.5 LTS (noble) | 3.5.28-2ubuntu0.24.04.1 | [djvulibre-desktop 3.5.28-2ubuntu0.24.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-djvulibre-desktop-3.5.28-2ubuntu0.24.04.1.md) | Jul 3, 2025 | | Linux | djvulibre-desktop Ubuntu 25.04 (plucky) | 3.5.28-2ubuntu0.25.04.1 | [djvulibre-desktop 3.5.28-2ubuntu0.25.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-djvulibre-desktop-3.5.28-2ubuntu0.25.04.1.md) | Jul 4, 2025 | | Linux | djvulibre-devel Fedora 43 | 3.5.30-1.fc43 | [FEDORA-2026-BFA185DBB3](https://patchblox.com/security/data/fix/linux/fedora-2026-bfa185dbb3.md) | May 21, 2026 | | Linux | djvulibre-libs Fedora 43 | 3.5.30-1.fc43 | [FEDORA-2026-BFA185DBB3](https://patchblox.com/security/data/fix/linux/fedora-2026-bfa185dbb3.md) | May 21, 2026 | | Linux | djvulibre-libs-debuginfo Fedora 43 | 3.5.30-1.fc43 | [FEDORA-2026-BFA185DBB3](https://patchblox.com/security/data/fix/linux/fedora-2026-bfa185dbb3.md) | May 21, 2026 | | Linux | djvuserve Ubuntu 18.04.6 LTS (bionic) | 3.5.27.1-8ubuntu0.4+esm1 | [djvuserve 3.5.27.1-8ubuntu0.4+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-djvuserve-3.5.27.1-8ubuntu0.4-esm1.md) | Jul 3, 2025 | | Linux | djvuserve Ubuntu 20.04 LTS (focal) | 3.5.27.1-14ubuntu0.1+esm1 | [djvuserve 3.5.27.1-14ubuntu0.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-djvuserve-3.5.27.1-14ubuntu0.1-esm1.md) | Jul 3, 2025 | | Linux | djvuserve Ubuntu 22.04.1 LTS (jammy) | 3.5.28-2ubuntu0.22.04.1 | [djvuserve 3.5.28-2ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-djvuserve-3.5.28-2ubuntu0.22.04.1.md) | Jul 3, 2025 | | Linux | djvuserve Ubuntu 24.04.5 LTS (noble) | 3.5.28-2ubuntu0.24.04.1 | [djvuserve 3.5.28-2ubuntu0.24.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-djvuserve-3.5.28-2ubuntu0.24.04.1.md) | Jul 3, 2025 | | Linux | djvuserve Ubuntu 25.04 (plucky) | 3.5.28-2ubuntu0.25.04.1 | [djvuserve 3.5.28-2ubuntu0.25.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-djvuserve-3.5.28-2ubuntu0.25.04.1.md) | Jul 4, 2025 | | Linux | libdjvulibre-text Ubuntu 18.04.6 LTS (bionic) | 3.5.27.1-8ubuntu0.4+esm1 | [libdjvulibre-text 3.5.27.1-8ubuntu0.4+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libdjvulibre-text-3.5.27.1-8ubuntu0.4-esm1.md) | Jul 3, 2025 | | Linux | libdjvulibre-text Ubuntu 20.04 LTS (focal) | 3.5.27.1-14ubuntu0.1+esm1 | [libdjvulibre-text 3.5.27.1-14ubuntu0.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libdjvulibre-text-3.5.27.1-14ubuntu0.1-esm1.md) | Jul 3, 2025 | | Linux | libdjvulibre-text Ubuntu 22.04.1 LTS (jammy) | 3.5.28-2ubuntu0.22.04.1 | [libdjvulibre-text 3.5.28-2ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libdjvulibre-text-3.5.28-2ubuntu0.22.04.1.md) | Jul 3, 2025 | | Linux | libdjvulibre-text Ubuntu 24.04.5 LTS (noble) | 3.5.28-2ubuntu0.24.04.1 | [libdjvulibre-text 3.5.28-2ubuntu0.24.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libdjvulibre-text-3.5.28-2ubuntu0.24.04.1.md) | Jul 3, 2025 | | Linux | libdjvulibre-text Ubuntu 25.04 (plucky) | 3.5.28-2ubuntu0.25.04.1 | [libdjvulibre-text 3.5.28-2ubuntu0.25.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libdjvulibre-text-3.5.28-2ubuntu0.25.04.1.md) | Jul 4, 2025 | | Linux | libdjvulibre21 Ubuntu 18.04.6 LTS (bionic) | 3.5.27.1-8ubuntu0.4+esm1 | [libdjvulibre21 3.5.27.1-8ubuntu0.4+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libdjvulibre21-3.5.27.1-8ubuntu0.4-esm1.md) | Jul 3, 2025 | | Linux | libdjvulibre21 Ubuntu 20.04 LTS (focal) | 3.5.27.1-14ubuntu0.1+esm1 | [libdjvulibre21 3.5.27.1-14ubuntu0.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libdjvulibre21-3.5.27.1-14ubuntu0.1-esm1.md) | Jul 3, 2025 | | Linux | libdjvulibre21 Ubuntu 22.04.1 LTS (jammy) | 3.5.28-2ubuntu0.22.04.1 | [libdjvulibre21 3.5.28-2ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libdjvulibre21-3.5.28-2ubuntu0.22.04.1.md) | Jul 3, 2025 | | Linux | libdjvulibre21 Ubuntu 24.04.5 LTS (noble) | 3.5.28-2ubuntu0.24.04.1 | [libdjvulibre21 3.5.28-2ubuntu0.24.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libdjvulibre21-3.5.28-2ubuntu0.24.04.1.md) | Jul 3, 2025 | | Linux | libdjvulibre21 Ubuntu 25.04 (plucky) | 3.5.28-2ubuntu0.25.04.1 | [libdjvulibre21 3.5.28-2ubuntu0.25.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-libdjvulibre21-3.5.28-2ubuntu0.25.04.1.md) | Jul 4, 2025 | --- Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.