EUVD-2022-45472

Malicious code in bioql PyPI...

EUVD-2022-37458

Malicious code in bioql PyPI...

EUVD-2022-52384

Malicious code in bioql PyPI...

EUVD-2024-35385

Malicious code in bioql PyPI...

EUVD-2023-31121

Malicious code in bioql PyPI...

EUVD-2021-9041

Malicious code in bioql PyPI...

EUVD-2024-0772

Malicious code in bioql PyPI...

EUVD-2024-35107

Malicious code in bioql PyPI...

EUVD-2023-42358

Malicious code in bioql PyPI...

EUVD-2025-23522

Malicious code in bioql PyPI...

EUVD-2024-35106

Malicious code in bioql PyPI...

EUVD-2024-46991

Malicious code in bioql PyPI...

DEBIAN-CVE-2025-46205

A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Service DoS by supplying a crafted PDF file. NOTE: this is disputed by the Supplier because there is no available file to reproduce the issue...

UBUNTU-CVE-2025-46205

A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Service DoS by supplying a crafted PDF file. NOTE: this is disputed by the Supplier because there is no available file to reproduce the issue...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free via the ReadDictionary function. An attacker can trigger application crashes or potentially execute arbitrary code by supplying a specially crafted PDF file. Remediation There is no fixed version for podofo. References -...

PT-2025-40287

Name of the Vulnerable Software and Affected Versions podofo versions 0.10.0 through 0.10.5 Description A heap-use-after-free issue exists in the PdfTokenizer::ReadDictionary function. This allows attackers to potentially cause a Denial of Service DoS by providing a specially crafted PDF file...

CVE-2025-46205

A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Service DoS by supplying a crafted PDF file. NOTE: this is disputed by the Supplier because there is no available file to reproduce the issue...

CVE-2025-46205

A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Service DoS by supplying a crafted PDF file. NOTE: this is disputed by the Supplier because there is no available file to reproduce the issue...

CVE-2025-46205

Summary: CVE-2025-46205 affects the PoDoFo library. A heap-use-after-free in the PdfTokenizer::ReadDictionary function (v0.10.0–v0.10.5) can allow a crafted PDF to cause a Denial of Service. The issue’s root cause is a post-release memory management flaw in ReadDictionary. Exploitation details ar...

CVE-2025-46205

A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Service DoS by supplying a crafted PDF file. NOTE: this is disputed by the Supplier because there is no available file to reproduce the issue...