1023 matches found
CVE-2026-44348
PoDoFo is a C++17 PDF manipulation library. From 1.0.0 to before 1.0.4, a double-free vulnerability exists in computehashtosign in src/podofo/private/OpenSSLInternalRipped.cpp. If EVPDigestFinal fails after buf has already been freed, the Error label frees buf a second time, causing heap...
CVE-2026-44348
PoDoFo 1.0.0 through before 1.0.4 contains a double‑free in compute_hash_to_sign() (OpenSSLInternal_Ripped.cpp). If EVP_DigestFinal fails after buf has already been freed, the Error path frees buf a second time, causing heap corruption. A fix is available in 1.0.4. Affected installations should u...
CVE-2026-44348 PoDoFo: Double-free vulnerability in compute_hash_to_sign()
PoDoFo is a C++17 PDF manipulation library. From 1.0.0 to before 1.0.4, a double-free vulnerability exists in computehashtosign in src/podofo/private/OpenSSLInternalRipped.cpp. If EVPDigestFinal fails after buf has already been freed, the Error label frees buf a second time, causing heap...
CVE-2026-44348 PoDoFo: Double-free vulnerability in compute_hash_to_sign()
PoDoFo is a C++17 PDF manipulation library. From 1.0.0 to before 1.0.4, a double-free vulnerability exists in computehashtosign in src/podofo/private/OpenSSLInternalRipped.cpp. If EVPDigestFinal fails after buf has already been freed, the Error label frees buf a second time, causing heap...
CVE-2026-44348
PoDoFo is a C++17 PDF manipulation library. From 1.0.0 to before 1.0.4, a double-free vulnerability exists in computehashtosign in src/podofo/private/OpenSSLInternalRipped.cpp. If EVPDigestFinal fails after buf has already been freed, the Error label frees buf a second time, causing heap...
PT-2026-40963
Name of the Vulnerable Software and Affected Versions PoDoFo versions 1.0.0 through 1.0.3 Description A double-free issue exists in the compute hash to sign function within the src/podofo/private/OpenSSLInternal Ripped.cpp file. If the EVP DigestFinal function fails after the buf variable has bee...
PoDoFo 资源管理错误漏洞
PoDoFo is a free, portable C++ library open sourced by PoDoFo. Versions of PoDoFo from 1.0.0 to 1.0.4 had a resource management bug. This bug stemmed from a double release in the computehashtosign function. When the EVPDigestFinal function failed after the buf had already been released, the error...
SUSE SLES15 Security Update : podofo (SUSE-SU-2025:03533-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:03533-1 advisory. - fixed a free-after-use in PdfTokenizer bsc1249105 Tenable has extracted the preceding description block directly from the SUSE security advisory. No...
Security update for podofo
This update for podofo fixes the following issues: fixed a free-after-use in PdfTokenizer bsc1249105 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your produc...
SUSE-SU-2025:03533-1 Security update for podofo
This update for podofo fixes the following issues: - fixed a free-after-use in PdfTokenizer bsc1249105...
EUVD-2021-17393
Malware in sbrugna...
EUVD-2021-17392
Malware in sbrugna...
EUVD-2021-17394
Malware in sbrugna...
EUVD-2021-17395
Malware in sbrugna...
EUVD-2020-10882
Malware in sbrugna...
EUVD-2020-10883
Malware in sbrugna...
EUVD-2018-3294
Malware in sbrugna...
EUVD-2018-3295
Malware in sbrugna...