VULNERABILITY INTELLIGENCE

CVE-2012-6535

CVSS score9.3 HIGH

EPSS probability4.64%

CISA KEVNot currently listed

Published2013-12-02

Last modified2026-06-16

Description

DjVuLibre before 3.5.25.3, as used in Evince, Sumatra PDF Reader, VuDroid, and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted DjVu (aka .djv) file.