Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the IsMetadataEncrypted function in PdfEncrypt. Remediation Upgrade podofo to version 0.10.4 or higher. References - GitHub Commit - GitHub Issue...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the function PoDoFo::PdfObject::DelayedLoad. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and legitimate users. Unlike other...