PO
Product
Podofo
63
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 18Medium 42Low 0
Watch
Add Podofo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-9687 | 9.8 | Mar 11 | PoDoFo 0.9.6 has a heap-based buffer overflow in PdfString::ConvertUTF16toUTF8 in base/PdfString.cpp Affected: 0.9.6 |
| CVE-2017-8378 | 9.8 | May 1 | Heap-based buffer overflow in the PdfParser::ReadObjects function in base/PdfParser.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (application crash) or… Affected: 0.9.5 |
| CVE-2015-8981 | 9.8 | Mar 16 | Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecified impact via vectors related to… Affected: All versions, or not specified |
| CVE-2023-31568 | 8.8 | May 10 | Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptRC4::PdfEncryptRC4 Affected: 0.10.0 |
| CVE-2023-31567 | 8.8 | May 10 | Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3 Affected: 0.10.0 |
| CVE-2023-31566 | 8.8 | May 10 | Podofo v0.10.0 was discovered to contain a heap-use-after-free via the component PoDoFo::PdfEncrypt::IsMetadataEncrypted() Affected: 0.10.0 |
| CVE-2019-9199 | 8.8 | Feb 26 | PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator.cpp in PoDoFo 0.9.6 has a NULL pointer dereference that can (for example) be triggered by sending a crafted PDF file to… Affected: 0.9.6 |
| CVE-2018-20751 | 8.8 | Feb 4 | An issue was discovered in crop_page in PoDoFo 0.9.6 Affected: 0.9.6 |
| CVE-2018-19532 | 8.8 | Nov 26 | A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget() in pdftranslator.cpp of PoDoFo 0.9.6, while creating the PdfXObject, as demonstrated by… Affected: 0.9.6 |
| CVE-2018-8002 | 8.8 | Mar 9 | In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result in stack overflow Affected: 0.9.5 |
| CVE-2018-8000 | 8.8 | Mar 9 | In PoDoFo 0.9.5, there exists a heap-based buffer overflow vulnerability in PoDoFo::PdfTokenizer::GetNextToken() in PdfTokenizer.cpp, a related issue to CVE-2017-5886 Affected: 0.9.5 |
| CVE-2017-8787 | 8.8 | May 5 | The PoDoFo::PdfXRefStreamParserObject::ReadXRefStreamEntry function in base/PdfXRefStreamParserObject.cpp:224 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service… Affected: 0.9.5 |
| CVE-2025-46205 | 8.1 | Oct 1 | A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Service (DoS) by supplying a crafted PDF file Affected: 0.10.0 through 0.10.5 |
| CVE-2021-30472 | 7.8 | May 26 | A flaw was found in PoDoFo 0.9.7 Affected: 0.9.7 |
| CVE-2018-12983 | 7.8 | Jun 29 | A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey() function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a… Affected: 0.9.6 |
| CVE-2018-8001 | 7.8 | Mar 9 | In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName() in PdfName.cpp Affected: 0.9.5 |
| CVE-2018-5308 | 7.8 | Jan 9 | PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function (base/PdfOutputStream.cpp) Affected: 0.9.5 |
| CVE-2017-6844 | 7.8 | Mar 15 | Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file Affected: 0.9.4 |
| CVE-2017-6843 | 7.8 | Mar 15 | Heap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file Affected: 0.9.4 |
| CVE-2017-5886 | 7.8 | Mar 1 | Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted… Affected: 0.9.4 |
| CVE-2017-5853 | 7.8 | Mar 1 | Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file Affected: 0.9.4 |
| CVE-2023-31556 | 6.5 | May 10 | podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyParent Affected: 0.10.0 |
| CVE-2023-31555 | 6.5 | May 10 | podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfObject::DelayedLoad Affected: 0.10.0 |
| CVE-2018-20797 | 6.5 | Feb 27 | An issue was discovered in PoDoFo 0.9.6 Affected: 0.9.6 |
| CVE-2018-14320 | 6.5 | Sep 17 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo Affected: All versions, or not specified |
| CVE-2018-11256 | 6.5 | May 18 | An issue was discovered in PoDoFo 0.9.5 Affected: 0.9.5 |
| CVE-2017-7994 | 6.5 | Apr 21 | The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application… Affected: 0.9.5 |
| CVE-2025-9394 | 5.5 | Aug 24 | PoDoFo PDF Dictionary PdfTokenizer.cpp DetermineDataType use after free Affected: 1.1.0 |
| CVE-2020-18972 | 5.5 | Aug 25 | Exposure of Sensitive Information to an Unauthorized Actor in PoDoFo v0.9.6 allows attackers to obtain sensitive information via 'IsNextToken' in the component… Affected: 0.9.6 |
| CVE-2020-18971 | 5.5 | Aug 25 | Stack-based Buffer Overflow in PoDoFo v0.9.6 allows attackers to cause a denial of service via the component 'src/base/PdfDictionary.cpp:65' Affected: 0.9.6 |
| CVE-2021-30471 | 5.5 | May 26 | A flaw was found in PoDoFo 0.9.7 Affected: 0.9.7 |
| CVE-2021-30470 | 5.5 | May 26 | A flaw was found in PoDoFo 0.9.7 Affected: 0.9.7 |
| CVE-2021-30469 | 5.5 | May 26 | A flaw was found in PoDoFo 0.9.7 Affected: 0.9.7 |
| CVE-2019-20093 | 5.5 | Dec 30 | The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file,… Affected: 0.9.6 |
| CVE-2019-10723 | 5.5 | Apr 3 | An issue was discovered in PoDoFo 0.9.6 Affected: 0.9.6 |
| CVE-2018-12982 | 5.5 | Jun 29 | Invalid memory read in the PoDoFo::PdfVariant::DelayedLoad() function in PdfVariant.h in PoDoFo 0.9.6-rc1 allows remote attackers to have denial-of-service impact via a crafted… Affected: 0.9.6 |
| CVE-2018-11255 | 5.5 | May 18 | An issue was discovered in PoDoFo 0.9.5 Affected: 0.9.5 |
| CVE-2018-11254 | 5.5 | May 18 | An issue was discovered in PoDoFo 0.9.5 Affected: 0.9.5 |
| CVE-2018-6352 | 5.5 | Jan 27 | In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp Affected: 0.9.5 |
| CVE-2018-5783 | 5.5 | Jan 19 | In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve function (base/PdfVecObjects.h) Affected: 0.9.5 |
| CVE-2018-5309 | 5.5 | Jan 9 | In PoDoFo 0.9.5, there is an integer overflow in the PdfObjectStreamParserObject::ReadObjectsFromStream function (base/PdfObjectStreamParserObject.cpp) Affected: 0.9.5 |
| CVE-2018-5296 | 5.5 | Jan 8 | In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PdfParser::ReadXRefSubsection function (base/PdfParser.cpp) Affected: 0.9.5 |
| CVE-2018-5295 | 5.5 | Jan 8 | In PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamParserObject::ParseStream function (base/PdfXRefStreamParserObject.cpp) Affected: 0.9.5 |
| CVE-2017-8054 | 5.5 | Apr 22 | The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (infinite recursion and application… Affected: 0.9.5 |
| CVE-2017-8053 | 5.5 | Apr 22 | PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp) Affected: 0.9.5 |
| CVE-2017-7383 | 5.5 | Apr 3 | The PdfFontFactory.cpp:195:62 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document Affected: 0.9.5 |
| CVE-2017-7382 | 5.5 | Apr 3 | The PdfFontFactory.cpp:200:88 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document Affected: 0.9.5 |
| CVE-2017-7381 | 5.5 | Apr 3 | The doc/PdfPage.cpp:609:23 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document Affected: 0.9.5 |
| CVE-2017-7380 | 5.5 | Apr 3 | The doc/PdfPage.cpp:614:20 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document Affected: 0.9.5 |
| CVE-2017-7379 | 5.5 | Apr 3 | The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and… Affected: 0.9.5 |