Merge pull request #897 from kevinbackhouse/DjVuLibre-CVE-2025-53367

Fuzzer-generated poc for DjVuLibre CVE-2025-53367

Author: kevinbackhouse

SecurityExploits/DjVuLibre/MMRDecoder_scanruns_CVE-2025-53367/README.md

@@ -0,0 +1,16 @@
+# Proof of concept for DjVuLibre CVE-2025-53367
+
+At this time, we are only sharing @antonio-morales's original
+fuzzer-generated poc, so that people can quickly test whether they're
+running a vulnerable version of DjVuLibre.  This poc only causes the
+DjVuLibre library to crash. We are delaying publication of our more
+sophisticated poc, which is able to bypass ASLR and gain code
+execution.
+
+[Fuzzer-generated poc file](./fuzzer-poc.djvu)
+
+## Links:
+
+* https://github.blog/security/vulnerability-research/cve-2025-53367-an-exploitable-out-of-bounds-write-in-djvulibre/
+* https://www.openwall.com/lists/oss-security/2025/07/03/1
+* https://securitylab.github.com/advisories/GHSL-2025-055_DjVuLibre/