Login Request a demo
PP
Vendor
Podofo Project
1 product with CVEs on record
63
CVEs
0
On KEV
0
New 30D
Products
PO
Podofo
Podofo Project
9.8
63 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-46205
PO
Podofo
Podofo Project
8.1
0%
Oct 1A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Service (DoS) by supplying a crafted PDF file
CVE-2025-9394
PO
Podofo
Podofo Project
5.5
0%
Aug 24PoDoFo PDF Dictionary PdfTokenizer.cpp DetermineDataType use after free
CVE-2023-31568
PO
Podofo
Podofo Project
8.8
1%
May 10Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptRC4::PdfEncryptRC4
CVE-2023-31567
PO
Podofo
Podofo Project
8.8
1%
May 10Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3
CVE-2023-31566
PO
Podofo
Podofo Project
8.8
1%
May 10Podofo v0.10.0 was discovered to contain a heap-use-after-free via the component PoDoFo::PdfEncrypt::IsMetadataEncrypted()
CVE-2023-31556
PO
Podofo
Podofo Project
6.5
1%
May 10podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyParent
CVE-2023-31555
PO
Podofo
Podofo Project
6.5
1%
May 10podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfObject::DelayedLoad
CVE-2023-2241
PO
Podofo
Podofo Project
5.3
0%
Apr 22A vulnerability, which was classified as critical, was found in PoDoFo 0.10.0
CVE-2020-18972
PO
Podofo
Podofo Project
5.5
1%
Aug 25Exposure of Sensitive Information to an Unauthorized Actor in PoDoFo v0.9.6 allows attackers to obtain sensitive information via 'IsNextToken' in the component…
CVE-2020-18971
PO
Podofo
Podofo Project
5.5
1%
Aug 25Stack-based Buffer Overflow in PoDoFo v0.9.6 allows attackers to cause a denial of service via the component 'src/base/PdfDictionary.cpp:65'
CVE-2021-30472
PO
Podofo
Podofo Project
7.8
1%
May 26A flaw was found in PoDoFo 0.9.7
CVE-2021-30471
PO
Podofo
Podofo Project
5.5
1%
May 26A flaw was found in PoDoFo 0.9.7
CVE-2021-30470
PO
Podofo
Podofo Project
5.5
1%
May 26A flaw was found in PoDoFo 0.9.7
CVE-2021-30469
PO
Podofo
Podofo Project
5.5
1%
May 26A flaw was found in PoDoFo 0.9.7
CVE-2019-20093
PO
Podofo
Podofo Project
5.5
1%
Dec 30The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file,…
CVE-2019-10723
PO
Podofo
Podofo Project
5.5
1%
Apr 3An issue was discovered in PoDoFo 0.9.6
CVE-2019-9687
PO
Podofo
Podofo Project
9.8
2%
Mar 11PoDoFo 0.9.6 has a heap-based buffer overflow in PdfString::ConvertUTF16toUTF8 in base/PdfString.cpp
CVE-2018-20797
PO
Podofo
Podofo Project
6.5
1%
Feb 27An issue was discovered in PoDoFo 0.9.6
CVE-2019-9199
PO
Podofo
Podofo Project
8.8
3%
Feb 26PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator.cpp in PoDoFo 0.9.6 has a NULL pointer dereference that can (for example) be triggered by sending a crafted PDF file to…
CVE-2018-20751
PO
Podofo
Podofo Project
8.8
2%
Feb 4An issue was discovered in crop_page in PoDoFo 0.9.6
CVE-2018-19532
PO
Podofo
Podofo Project
8.8
2%
Nov 26A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget() in pdftranslator.cpp of PoDoFo 0.9.6, while creating the PdfXObject, as demonstrated by…
CVE-2018-14320
PO
Podofo
Podofo Project
6.5
2%
Sep 17This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo
CVE-2018-12983
PO
Podofo
Podofo Project
7.8
1%
Jun 29A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey() function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a…
CVE-2018-12982
PO
Podofo
Podofo Project
5.5
1%
Jun 29Invalid memory read in the PoDoFo::PdfVariant::DelayedLoad() function in PdfVariant.h in PoDoFo 0.9.6-rc1 allows remote attackers to have denial-of-service impact via a crafted…
CVE-2018-11256
PO
Podofo
Podofo Project
6.5
1%
May 18An issue was discovered in PoDoFo 0.9.5
CVE-2018-11255
PO
Podofo
Podofo Project
5.5
1%
May 18An issue was discovered in PoDoFo 0.9.5
CVE-2018-11254
PO
Podofo
Podofo Project
5.5
1%
May 18An issue was discovered in PoDoFo 0.9.5
CVE-2018-8002
PO
Podofo
Podofo Project
8.8
8%
Mar 9In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result in stack overflow
CVE-2018-8001
PO
Podofo
Podofo Project
7.8
1%
Mar 9In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName() in PdfName.cpp
CVE-2018-8000
PO
Podofo
Podofo Project
8.8
3%
Mar 9In PoDoFo 0.9.5, there exists a heap-based buffer overflow vulnerability in PoDoFo::PdfTokenizer::GetNextToken() in PdfTokenizer.cpp, a related issue to CVE-2017-5886
CVE-2018-6352
PO
Podofo
Podofo Project
5.5
1%
Jan 27In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp
CVE-2018-5783
PO
Podofo
Podofo Project
5.5
1%
Jan 19In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve function (base/PdfVecObjects.h)
CVE-2018-5309
PO
Podofo
Podofo Project
5.5
1%
Jan 9In PoDoFo 0.9.5, there is an integer overflow in the PdfObjectStreamParserObject::ReadObjectsFromStream function (base/PdfObjectStreamParserObject.cpp)
CVE-2018-5308
PO
Podofo
Podofo Project
7.8
1%
Jan 9PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function (base/PdfOutputStream.cpp)
CVE-2018-5296
PO
Podofo
Podofo Project
5.5
1%
Jan 8In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PdfParser::ReadXRefSubsection function (base/PdfParser.cpp)
CVE-2018-5295
PO
Podofo
Podofo Project
5.5
1%
Jan 8In PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamParserObject::ParseStream function (base/PdfXRefStreamParserObject.cpp)
CVE-2017-8787
PO
Podofo
Podofo Project
8.8
2%
May 5The PoDoFo::PdfXRefStreamParserObject::ReadXRefStreamEntry function in base/PdfXRefStreamParserObject.cpp:224 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service…
CVE-2017-8378
PO
Podofo
Podofo Project
9.8
2%
May 1Heap-based buffer overflow in the PdfParser::ReadObjects function in base/PdfParser.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (application crash) or…
CVE-2017-8054
PO
Podofo
Podofo Project
5.5
1%
Apr 22The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (infinite recursion and application…
CVE-2017-8053
PO
Podofo
Podofo Project
5.5
1%
Apr 22PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp)
CVE-2017-7994
PO
Podofo
Podofo Project
6.5
3%
Apr 21The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application…
CVE-2017-7383
PO
Podofo
Podofo Project
5.5
1%
Apr 3The PdfFontFactory.cpp:195:62 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document
CVE-2017-7382
PO
Podofo
Podofo Project
5.5
1%
Apr 3The PdfFontFactory.cpp:200:88 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document
CVE-2017-7381
PO
Podofo
Podofo Project
5.5
1%
Apr 3The doc/PdfPage.cpp:609:23 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document
CVE-2017-7380
PO
Podofo
Podofo Project
5.5
1%
Apr 3The doc/PdfPage.cpp:614:20 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document
CVE-2017-7379
PO
Podofo
Podofo Project
5.5
1%
Apr 3The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and…
CVE-2017-7378
PO
Podofo
Podofo Project
5.5
1%
Apr 3The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application…
CVE-2015-8981
PO
Podofo
Podofo Project
9.8
3%
Mar 16Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecified impact via vectors related to…
CVE-2017-6849
PO
Podofo
Podofo Project
5.5
1%
Mar 15The PoDoFo::PdfColorGray::~PdfColorGray function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file
CVE-2017-6848
PO
Podofo
Podofo Project
5.5
1%
Mar 15The PoDoFo::PdfXObject::PdfXObject function in PdfXObject.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file
CVE-2017-6847
PO
Podofo
Podofo Project
5.5
1%
Mar 15The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file
CVE-2017-6846
PO
Podofo
Podofo Project
5.5
1%
Mar 15The GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function in graphicsstack.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer…
CVE-2017-6845
PO
Podofo
Podofo Project
5.5
1%
Mar 15The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file
CVE-2017-6844
PO
Podofo
Podofo Project
7.8
2%
Mar 15Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file
CVE-2017-6843
PO
Podofo
Podofo Project
7.8
2%
Mar 15Heap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file
CVE-2017-6842
PO
Podofo
Podofo Project
5.5
1%
Mar 15The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file
CVE-2017-6841
PO
Podofo
Podofo Project
5.5
1%
Mar 15The GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement function in graphicsstack.h in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer…
CVE-2017-6840
PO
Podofo
Podofo Project
5.5
1%
Mar 15The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (invalid read) via a crafted file
CVE-2017-5886
PO
Podofo
Podofo Project
7.8
2%
Mar 1Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted…
CVE-2017-5855
PO
Podofo
Podofo Project
5.5
1%
Mar 1The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted…