CVE-2023-31568

Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptRC4::PdfEncryptRC4...

CVE-2023-31567

Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3...

PoDoFo 缓冲区错误漏洞

PoDoFo is a free portable C++ library open-sourced by PoDoFo. PoDoFo version 0.10.0 suffers from a buffer overflow vulnerability that originates from the function PoDoFo::PdfEncryptRC4::PdfEncryptRC4 contains a heap buffer overflow. An attacker can exploit the vulnerability to run arbitrary code ...

PoDoFo 缓冲区错误漏洞

PoDoFo is a free portable C++ library open-sourced by PoDoFo. A security vulnerability exists in PoDoFo version 0.10.0, which stems from the function PoDoFo::PdfDictionary::findKeyParent containing a segmentation violation...

CVE-2023-31566

Podofo v0.10.0 was discovered to contain a heap-use-after-free via the component PoDoFo::PdfEncrypt::IsMetadataEncrypted...

PoDoFo 安全漏洞

PoDoFo is a free portable C++ library open-sourced by PoDoFo. A security vulnerability exists in PoDoFo version 0.10.0, which stems from the function PoDoFo::PdfObject::DelayedLoad containing a segmentation violation...

CVE-2023-31567

CVE-2023-31567 affects PoDoFo v0.10.0. The vulnerability is a heap buffer overflow in PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3, with potential arbitrary code execution per CNVD-2023-39431. Multiple advisories reference this CVE; Gentoo GLSA 202405-33 recommends upgrading to >= 0.10.1. Nessus e...

CVE-2023-31566

Podofo v0.10.0 was discovered to contain a heap-use-after-free via the component PoDoFo::PdfEncrypt::IsMetadataEncrypted...

CVE-2023-31566

Podofo v0.10.0 was discovered to contain a heap-use-after-free via the component PoDoFo::PdfEncrypt::IsMetadataEncrypted...

PoDoFo 缓冲区错误漏洞

PoDoFo is a free portable C++ library open-sourced by PoDoFo. PoDoFo version 0.10.0 suffers from a buffer overflow vulnerability that originates from the function PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3 contains a heap buffer overflow. A remote attacker could exploit this vulnerability to execut...

CVE-2023-31567

Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3...

CVE-2023-31568

Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptRC4::PdfEncryptRC4...

CVE-2023-31555

This CVE affects podofoinfo/podofo 0.10.0, where a segmentation violation occurs in PoDoFo::PdfObject::DelayedLoad. The issue is documented across multiple sources (e.g., Snyk) with remediation to upgrade to podofo version 0.10.4 or higher. The NVD/NVD-derived metrics indicate MEDIUM base severit...

PoDoFo 资源管理错误漏洞

PoDoFo is a free portable C++ library open-sourced by PoDoFo. A resource management error vulnerability exists in PoDoFo version 0.10.0, which stems from the function PoDoFo::PdfEncrypt::IsMetadataEncrypted containing heap reuse after release. A remote attacker can exploit this vulnerability to...

CVE-2023-31566

CVE-2023-31566 affects PoDoFo v0.10.0, where PoDoFo::PdfEncrypt::IsMetadataEncrypted() contains a heap-use-after-free. This vulnerability is confirmed across multiple sources (OSV/NVD/NASL entries). Potential impact includes high severity exposure; no exploitation details are provided in the docu...

CVE-2023-31568

Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptRC4::PdfEncryptRC4...

CVE-2023-31567

Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3...

CVE-2023-31566

Podofo v0.10.0 was discovered to contain a heap-use-after-free via the component PoDoFo::PdfEncrypt::IsMetadataEncrypted...

CVE-2023-31568

Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptRC4::PdfEncryptRC4...

SUSE CVE-2023-2241

A vulnerability, which was classified as critical, was found in PoDoFo 0.10.0. Affected is the function readXRefStreamEntry of the file PdfXRefStreamParserObject.cpp. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to th...