podofo_project Vulnerability Advisory Catalog

Total 63 security vulnerabilities recorded for podofo_project software and firmware.

← Back to All Vendors
Component: podofo

An issue was discovered in PoDoFo 0.9.5. The function PdfDocument::Append() in PdfDocument.cpp in PoDoFo 0.9.5 allows remote attackers to cause a deni...

📅 2018-05-18
CVSS 6.5 Dossier →
Component: podofo

An issue was discovered in PoDoFo 0.9.5. The function PdfPage::GetPageNumber() in PdfPage.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denia...

📅 2018-05-18
CVSS 5.5 Dossier →
Component: podofo

An issue was discovered in PoDoFo 0.9.5. There is an Excessive Recursion in the PdfPagesTree::GetPageNode() function of PdfPagesTree.cpp. Remote attac...

📅 2018-05-18
CVSS 5.5 Dossier →
Component: podofo

In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result in stack ...

📅 2018-03-09
CVSS 8.8 Dossier →
Component: podofo

In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName() in PdfName.cpp. Remote attackers could leverage this vulne...

📅 2018-03-09
CVSS 7.8 Dossier →
Component: podofo

In PoDoFo 0.9.5, there exists a heap-based buffer overflow vulnerability in PoDoFo::PdfTokenizer::GetNextToken() in PdfTokenizer.cpp, a related issue ...

📅 2018-03-09
CVSS 8.8 Dossier →
CVE-2018-6352 MEDIUM
Component: podofo

In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage...

📅 2018-01-27
CVSS 5.5 Dossier →
CVE-2018-5783 MEDIUM
Component: podofo

In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve function (base/PdfVecObjects.h). Remote attackers co...

📅 2018-01-19
CVSS 5.5 Dossier →
CVE-2018-5309 MEDIUM
Component: podofo

In PoDoFo 0.9.5, there is an integer overflow in the PdfObjectStreamParserObject::ReadObjectsFromStream function (base/PdfObjectStreamParserObject.cpp...

📅 2018-01-09
CVSS 5.5 Dossier →
Component: podofo

PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function (base/PdfOutputStream.cpp). Remote attackers cou...

📅 2018-01-09
CVSS 7.8 Dossier →
CVE-2018-5296 MEDIUM
Component: podofo

In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PdfParser::ReadXRefSubsection function (base/PdfParser.cpp). Remote attackers could...

📅 2018-01-08
CVSS 5.5 Dossier →
CVE-2018-5295 MEDIUM
Component: podofo

In PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamParserObject::ParseStream function (base/PdfXRefStreamParserObject.cpp). Remote atta...

📅 2018-01-08
CVSS 5.5 Dossier →
Component: podofo

The PoDoFo::PdfXRefStreamParserObject::ReadXRefStreamEntry function in base/PdfXRefStreamParserObject.cpp:224 in PoDoFo 0.9.5 allows remote attackers ...

📅 2017-05-05
CVSS 8.8 Dossier →
CVE-2017-8378 CRITICAL
Component: podofo

Heap-based buffer overflow in the PdfParser::ReadObjects function in base/PdfParser.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of s...

📅 2017-05-01
CVSS 9.8 Dossier →
CVE-2017-8054 MEDIUM
Component: podofo

The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (infinite ...

📅 2017-04-22
CVSS 5.5 Dossier →
CVE-2017-8053 MEDIUM
Component: podofo

PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (P...

📅 2017-04-22
CVSS 5.5 Dossier →
CVE-2017-7994 MEDIUM
Component: podofo

The function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer der...

📅 2017-04-21
CVSS 6.5 Dossier →
CVE-2017-7383 MEDIUM
Component: podofo

The PdfFontFactory.cpp:195:62 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application cras...

📅 2017-04-03
CVSS 5.5 Dossier →
CVE-2017-7382 MEDIUM
Component: podofo

The PdfFontFactory.cpp:200:88 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application cras...

📅 2017-04-03
CVSS 5.5 Dossier →
CVE-2017-7381 MEDIUM
Component: podofo

The doc/PdfPage.cpp:609:23 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) ...

📅 2017-04-03
CVSS 5.5 Dossier →
CVE-2017-7380 MEDIUM
Component: podofo

The doc/PdfPage.cpp:614:20 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) ...

📅 2017-04-03
CVSS 5.5 Dossier →
CVE-2017-7379 MEDIUM
Component: podofo

The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (hea...

📅 2017-04-03
CVSS 5.5 Dossier →
CVE-2017-7378 MEDIUM
Component: podofo

The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (heap-based buffer ...

📅 2017-04-03
CVSS 5.5 Dossier →
CVE-2015-8981 CRITICAL
Component: podofo

Heap-based buffer overflow in the PdfParser::ReadXRefSubsection function in base/PdfParser.cpp in PoDoFo allows attackers to have unspecified impact v...

📅 2017-03-16
CVSS 9.8 Dossier →
Page 2 of 3 (63 Total Records)