Browse CVEs

MEDIUM 5.5 CVE-2020-18972 Exposure of Sensitive Information to an Unauthorized Actor in PoDoFo v0.9.6 allows attackers to obtain sensitive information via 'IsNextToken' in the… Podofo No fix yet Fix from $1,6002021-08-25 MEDIUM 5.5 CVE-2020-18971 Stack-based Buffer Overflow in PoDoFo v0.9.6 allows attackers to cause a denial of service via the component 'src/base/PdfDictionary.cpp:65'. Podofo No fix yet Fix from $1,6002021-08-25 MEDIUM 5.5 CVE-2019-10723 An issue was discovered in PoDoFo 0.9.6. The PdfPagesTreeCache class in doc/PdfPagesTreeCache.cpp has an attempted excessive memory allocation becaus… Podofo No fix yet Fix from $1,6002019-04-03 MEDIUM 6.5 CVE-2018-20797 An issue was discovered in PoDoFo 0.9.6. There is an attempted excessive memory allocation in PoDoFo::podofo_calloc in base/PdfMemoryManagement.cpp w… Podofo No fix yet Fix from $1,6002019-02-27 HIGH 8.8 CVE-2018-20751 An issue was discovered in crop_page in PoDoFo 0.9.6. For a crafted PDF document, pPage->GetObject()->GetDictionary().AddKey(PdfName("MediaBox"),var)… Podofo No fix yet Fix from $1,9502019-02-04 MEDIUM 6.5 CVE-2018-14320 This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to e… Podofo Mitigation only Fix from $1,6002018-09-17 HIGH 7.8 CVE-2018-12983 A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey() function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by … Podofo No fix yet Fix from $1,9502018-06-29 MEDIUM 5.5 CVE-2018-12982 Invalid memory read in the PoDoFo::PdfVariant::DelayedLoad() function in PdfVariant.h in PoDoFo 0.9.6-rc1 allows remote attackers to have denial-of-s… Podofo No fix yet Fix from $1,6002018-06-29 MEDIUM 6.5 CVE-2018-11256 An issue was discovered in PoDoFo 0.9.5. The function PdfDocument::Append() in PdfDocument.cpp in PoDoFo 0.9.5 allows remote attackers to cause a den… Podofo No fix yet Fix from $1,6002018-05-18 MEDIUM 5.5 CVE-2018-11254 An issue was discovered in PoDoFo 0.9.5. There is an Excessive Recursion in the PdfPagesTree::GetPageNode() function of PdfPagesTree.cpp. Remote atta… Podofo Mitigation only Fix from $1,6002018-05-18 MEDIUM 5.5 CVE-2018-11255 An issue was discovered in PoDoFo 0.9.5. The function PdfPage::GetPageNumber() in PdfPage.cpp in PoDoFo 0.9.5 allows remote attackers to cause a deni… Podofo No fix yet Fix from $1,6002018-05-18 HIGH 8.8 CVE-2018-8000 In PoDoFo 0.9.5, there exists a heap-based buffer overflow vulnerability in PoDoFo::PdfTokenizer::GetNextToken() in PdfTokenizer.cpp, a related issue… Podofo No fix yet Fix from $1,9502018-03-09 HIGH 8.8 CVE-2018-8002EPSS 8% In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result in stack… Podofo No fix yet Fix from $1,9502018-03-09 HIGH 7.8 CVE-2018-8001 In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName() in PdfName.cpp. Remote attackers could leverage this vuln… Podofo Mitigation only Fix from $1,9502018-03-09 MEDIUM 5.5 CVE-2018-6352 In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverag… Podofo Mitigation only Fix from $1,6002018-01-27 MEDIUM 5.5 CVE-2018-5783 In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve function (base/PdfVecObjects.h). Remote attackers c… Podofo No fix yet Fix from $1,6002018-01-19 HIGH 7.8 CVE-2018-5308 PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function (base/PdfOutputStream.cpp). Remote attackers co… Podofo No fix yet Fix from $1,9502018-01-09 MEDIUM 5.5 CVE-2018-5309 In PoDoFo 0.9.5, there is an integer overflow in the PdfObjectStreamParserObject::ReadObjectsFromStream function (base/PdfObjectStreamParserObject.cp… Podofo No fix yet Fix from $1,6002018-01-09 MEDIUM 5.5 CVE-2018-5295 In PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamParserObject::ParseStream function (base/PdfXRefStreamParserObject.cpp). Remote att… Podofo No fix yet Fix from $1,6002018-01-08 MEDIUM 5.5 CVE-2018-5296 In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PdfParser::ReadXRefSubsection function (base/PdfParser.cpp). Remote attackers coul… Podofo No fix yet Fix from $1,6002018-01-08 HIGH 8.8 CVE-2017-8787 The PoDoFo::PdfXRefStreamParserObject::ReadXRefStreamEntry function in base/PdfXRefStreamParserObject.cpp:224 in PoDoFo 0.9.5 allows remote attackers… Podofo Mitigation only Fix from $1,9502017-05-05 MEDIUM 5.5 CVE-2017-8054 The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (infinite… Podofo No fix yet Fix from $1,6002017-04-22 MEDIUM 5.5 CVE-2017-8053 PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (… Podofo No fix yet Fix from $1,6002017-04-22 MEDIUM 6.5 CVE-2017-7994 The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer de… Podofo No fix yet Fix from $1,6002017-04-21 MEDIUM 5.5 CVE-2017-7379 The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (he… Podofo Mitigation only Fix from $1,6002017-04-03 MEDIUM 5.5 CVE-2017-7380 The doc/PdfPage.cpp:614:20 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash)… Podofo Mitigation only Fix from $1,6002017-04-03 MEDIUM 5.5 CVE-2017-7381 The doc/PdfPage.cpp:609:23 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash)… Podofo Mitigation only Fix from $1,6002017-04-03 MEDIUM 5.5 CVE-2017-7382 The PdfFontFactory.cpp:200:88 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application cra… Podofo Mitigation only Fix from $1,6002017-04-03 MEDIUM 5.5 CVE-2017-7383 The PdfFontFactory.cpp:195:62 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application cra… Podofo Mitigation only Fix from $1,6002017-04-03 MEDIUM 5.5 CVE-2017-7378 The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer… Podofo Mitigation only Fix from $1,6002017-04-03