Denial Of Services (DoS)

2023-05-2305:03:15

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

denial of services

segmentation fault

pdfdictionary.cpp

application crash

vulnerability

attacker

0.001 Low

EPSS

Percentile

33.5%

JSON

libpodofo.so is vulnerable to Denial Of Services (DoS). The vulnerability exists due to the segmentation fault in the findKeyParent function of PdfDictionary.cpp, which allows an attacker to cause an application crash.

CPENameOperatorVersion
libpodofo.soeq0.10.0
libpodofo.soeq0.10.0

CPE	Name	Operator	Version
	libpodofo.so	eq	0.10.0
	libpodofo.so	eq	0.10.0

References

github.com/advisories/GHSA-r738-vmx2-9fp4

github.com/podofo/podofo/commit/8d3e9104ea10f8b53a0b5a2a806e6388acd41a40

github.com/podofo/podofo/issues/66

0.001 Low

EPSS

Percentile

33.5%

JSON

Related for VERACODE:40640