It was discovered that DjVuLibre incorrectly handled certain memory operations. If a user or automated system were tricked into processing a specially crafted DjVu file, a remote attacker could cause applications to stop responding or crash, resulting in a denial of service, or possibly execute arbitrary code.
3.5.28-2ubuntu0.22.04.13.5.28-2ubuntu0.24.04.13.5.28-2ubuntu0.25.04.1