CVE-2017-6848

The PoDoFo::PdfXObject::PdfXObject function in PdfXObject.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6849

The PoDoFo::PdfColorGray::PdfColorGray function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6848

The PoDoFo::PdfXObject::PdfXObject function in PdfXObject.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6841

CVE-2017-6841 affects PoDoFo 0.9.5: the GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement destructor can dereference a NULL pointer when processing crafted PDFs, leading to a denial of service. Public advisories (OSV entries for SUSE) document a fix as part of podofo updates (e.g., SUS...

CVE-2017-6842

CVE-2017-6842 affects PoDoFo 0.9.5: the ColorChanger::GetColorFromStack function in colorchanger.cpp exposes a NULL pointer dereference via a crafted file, causing denial of service. Public sources (OSV and OSV-linked advisories) confirm a fix was released (e.g., SUSE-SU-2024:3550-1) and indicate...

CVE-2017-6842

The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6845

The PoDoFo::PdfColor::operator function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6849

The PoDoFo::PdfColorGray::PdfColorGray function in PdfColor.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6848

The PoDoFo::PdfXObject::PdfXObject function in PdfXObject.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6843

Heap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

CVE-2017-6844

Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

CVE-2017-6846

The GraphicsStack::TGraphicsStackElement::SetNonStrokingColorSpace function in graphicsstack.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6847

The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-6843: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to have unspecified impact via a crafted file...

PT-2017-17372

Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.4 Description The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, via a crafted file. This is due to a problem in the PoDoFo::PdfColor::operator function in PdfColor.cpp...

PT-2017-17373

Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.4 Description The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, via a crafted file. This is due to a problem in the...

PT-2017-17371

Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.4 Description A buffer overflow issue exists in the PoDoFo::PdfParser::ReadXRefSubsection function, located in PdfParser.cpp. This issue can be triggered by remote attackers using a crafted file, potentially leading to...

PT-2017-17370

Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.4 Description A heap-based buffer overflow issue exists in the PoDoFo::PdfVariant::DelayedLoad function, located in PdfVariant.h. This issue can be triggered by remote attackers using a crafted file, potentially leading to...

PT-2017-17375

Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.5 Description The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, via a crafted file. This is due to a problem in the PoDoFo::PdfXObject::PdfXObject function in...

PT-2017-17374

Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.4 Description The issue allows remote attackers to cause a denial of service, specifically a NULL pointer dereference, by providing a crafted file. This is related to the PoDoFo::PdfVariant::DelayedLoad function in...