The vulnerabilities of the functions PdfTokenizer::ReadArray(), PdfTokenizer::GetNextVariant(), and PdfTokenizer::ReadDataType() in the software library for working with PDF files, which allows attackers to cause service interruptions.

The vulnerabilities of the functions PdfTokenizer::ReadArray, PdfTokenizer::GetNextVariant, and PdfTokenizer::ReadDataType in the PDF processing software library PoDoFo are related to uncontrolled recursion. Exploiting these vulnerabilities could allow an attacker to cause service interruptions...

CVE-2021-30470: Uncontrolled Recursion

A flaw was found in PoDoFo 0.9.7. An uncontrolled recursive call among PdfTokenizer::ReadArray, PdfTokenizer::GetNextVariant and PdfTokenizer::ReadDataType functions can lead to a stack overflow...