CVE-2023-6863

The ShutdownObserver was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121...

PoDoFo 'GraphicsStack::TGraphicsStackElement::~TGraphicsStackElement' function denial of service vulnerability

PoDoFo is an open source , written in C++ using the PDF file format library . A denial of service vulnerability exists in PoDoFo's 'GraphicsStack::TGraphicsStackElement::TGraphicsStackElement' function. This allows remote attackers to construct malicious files and trick users into parsing them,...