PO
Product
Podofo
63
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 18Medium 42Low 0
Watch
Add Podofo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-31556 | 6.5 | May 10 | podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyParent Affected: 0.10.0 |
| CVE-2023-31555 | 6.5 | May 10 | podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfObject::DelayedLoad Affected: 0.10.0 |
| CVE-2018-20797 | 6.5 | Feb 27 | An issue was discovered in PoDoFo 0.9.6 Affected: 0.9.6 |
| CVE-2018-14320 | 6.5 | Sep 17 | This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo Affected: All versions, or not specified |
| CVE-2018-11256 | 6.5 | May 18 | An issue was discovered in PoDoFo 0.9.5 Affected: 0.9.5 |
| CVE-2017-7994 | 6.5 | Apr 21 | The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application… Affected: 0.9.5 |
| CVE-2025-9394 | 5.5 | Aug 24 | PoDoFo PDF Dictionary PdfTokenizer.cpp DetermineDataType use after free Affected: 1.1.0 |
| CVE-2020-18972 | 5.5 | Aug 25 | Exposure of Sensitive Information to an Unauthorized Actor in PoDoFo v0.9.6 allows attackers to obtain sensitive information via 'IsNextToken' in the component… Affected: 0.9.6 |
| CVE-2020-18971 | 5.5 | Aug 25 | Stack-based Buffer Overflow in PoDoFo v0.9.6 allows attackers to cause a denial of service via the component 'src/base/PdfDictionary.cpp:65' Affected: 0.9.6 |
| CVE-2021-30471 | 5.5 | May 26 | A flaw was found in PoDoFo 0.9.7 Affected: 0.9.7 |
| CVE-2021-30470 | 5.5 | May 26 | A flaw was found in PoDoFo 0.9.7 Affected: 0.9.7 |
| CVE-2021-30469 | 5.5 | May 26 | A flaw was found in PoDoFo 0.9.7 Affected: 0.9.7 |
| CVE-2019-20093 | 5.5 | Dec 30 | The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file,… Affected: 0.9.6 |
| CVE-2019-10723 | 5.5 | Apr 3 | An issue was discovered in PoDoFo 0.9.6 Affected: 0.9.6 |
| CVE-2018-12982 | 5.5 | Jun 29 | Invalid memory read in the PoDoFo::PdfVariant::DelayedLoad() function in PdfVariant.h in PoDoFo 0.9.6-rc1 allows remote attackers to have denial-of-service impact via a crafted… Affected: 0.9.6 |
| CVE-2018-11255 | 5.5 | May 18 | An issue was discovered in PoDoFo 0.9.5 Affected: 0.9.5 |
| CVE-2018-11254 | 5.5 | May 18 | An issue was discovered in PoDoFo 0.9.5 Affected: 0.9.5 |
| CVE-2018-6352 | 5.5 | Jan 27 | In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp Affected: 0.9.5 |
| CVE-2018-5783 | 5.5 | Jan 19 | In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve function (base/PdfVecObjects.h) Affected: 0.9.5 |
| CVE-2018-5309 | 5.5 | Jan 9 | In PoDoFo 0.9.5, there is an integer overflow in the PdfObjectStreamParserObject::ReadObjectsFromStream function (base/PdfObjectStreamParserObject.cpp) Affected: 0.9.5 |
| CVE-2018-5296 | 5.5 | Jan 8 | In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PdfParser::ReadXRefSubsection function (base/PdfParser.cpp) Affected: 0.9.5 |
| CVE-2018-5295 | 5.5 | Jan 8 | In PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamParserObject::ParseStream function (base/PdfXRefStreamParserObject.cpp) Affected: 0.9.5 |
| CVE-2017-8054 | 5.5 | Apr 22 | The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (infinite recursion and application… Affected: 0.9.5 |
| CVE-2017-8053 | 5.5 | Apr 22 | PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp) Affected: 0.9.5 |
| CVE-2017-7383 | 5.5 | Apr 3 | The PdfFontFactory.cpp:195:62 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document Affected: 0.9.5 |
| CVE-2017-7382 | 5.5 | Apr 3 | The PdfFontFactory.cpp:200:88 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document Affected: 0.9.5 |
| CVE-2017-7381 | 5.5 | Apr 3 | The doc/PdfPage.cpp:609:23 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document Affected: 0.9.5 |
| CVE-2017-7380 | 5.5 | Apr 3 | The doc/PdfPage.cpp:614:20 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document Affected: 0.9.5 |
| CVE-2017-7379 | 5.5 | Apr 3 | The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and… Affected: 0.9.5 |
| CVE-2017-7378 | 5.5 | Apr 3 | The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application… Affected: 0.9.5 |
| CVE-2017-6849 | 5.5 | Mar 15 | The PoDoFo::PdfColorGray::~PdfColorGray function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file Affected: 0.9.4 |
| CVE-2017-6848 | 5.5 | Mar 15 | The PoDoFo::PdfXObject::PdfXObject function in PdfXObject.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file Affected: 0.9.5 |
| CVE-2017-6847 | 5.5 | Mar 15 | The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file Affected: 0.9.4 |
| CVE-2017-6846 | 5.5 | Mar 15 | The GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function in graphicsstack.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer… Affected: 0.9.4 |
| CVE-2017-6845 | 5.5 | Mar 15 | The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file Affected: 0.9.4 |
| CVE-2017-6842 | 5.5 | Mar 15 | The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file Affected: 0.9.5 |
| CVE-2017-6841 | 5.5 | Mar 15 | The GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement function in graphicsstack.h in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer… Affected: 0.9.5 |
| CVE-2017-6840 | 5.5 | Mar 15 | The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (invalid read) via a crafted file Affected: 0.9.5 |
| CVE-2017-5855 | 5.5 | Mar 1 | The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted… Affected: 0.9.4 |
| CVE-2017-5854 | 5.5 | Mar 1 | base/PdfOutputStream.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted file Affected: 0.9.4 |
| CVE-2017-5852 | 5.5 | Mar 1 | The PoDoFo::PdfPage::GetInheritedKeyFromObject function in base/PdfVariant.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted… Affected: 0.9.4 |
| CVE-2023-2241 | 5.3 | Apr 22 | A vulnerability, which was classified as critical, was found in PoDoFo 0.10.0 Affected: 0.10.0 |
Showing 42