Lucene search

Veracode Vulnerability DatabaseVERACODE:40616

HistoryMay 21, 2023 - 9:04 a.m.

Denial Of Services (DoS)

2023-05-2109:04:14

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

libpodofo

denial of service

pdfencryptrc4

heap buffer overflow

application crash

vulnerability

8.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.3%

JSON

libpodofo.so is vulnerable to Denial of Service (DoS). This vulnerability exists because it does not properly manage heap buffer overflow s in :PdfEncryptRC4 which allows an attacker to cause an application crash.

CPENameOperatorVersion
libpodofo.sole0.10.0
libpodofo.sole0.10.0

CPE	Name	Operator	Version
	libpodofo.so	le	0.10.0
	libpodofo.so	le	0.10.0

References

github.com/advisories/GHSA-v545-mfxj-6893

github.com/podofo/podofo/commit/29d59f604b37159e938a2f46acd4856cfd1e7bac

github.com/podofo/podofo/issues/72