An issue was discovered in PoDoFo 0.9.5. The function PdfDocument::Append() in PdfDocument.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
Search vulnerabilities
CVE-2018-11256
CVSS 3.0 · 6.5 Medium
EPSS 1.3%
KEV · Not listed
Vendors
Products
CVE-2018-11255
An issue was discovered in PoDoFo 0.9.5. The function PdfPage::GetPageNumber() in PdfPage.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF document.
CVSS 3.0 · 5.5 Medium
EPSS 1.1%
KEV · Not listed
Vendors
Products
CVE-2018-11254
An issue was discovered in PoDoFo 0.9.5. There is an Excessive Recursion in the PdfPagesTree::GetPageNode() function of PdfPagesTree.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file, a related issue to CVE-2017-8054.
CVSS 3.0 · 5.5 Medium
EPSS 1.1%
KEV · Not listed
Vendors
Products