Memory Read Vulnerability in PoDoFo Affects Multiple Versions
CVE-2018-12982

5.5MEDIUM

Key Information:

Vendor

Podofo Project

Status
Podofo
Vendor
CVE Published:
29 June 2018

What is CVE-2018-12982?

A memory read vulnerability exists in the PoDoFo library, specifically within the PoDoFo::PdfVariant::DelayedLoad() function in PdfVariant.h. This flaw can be exploited by remote attackers using specially crafted files, potentially leading to denial-of-service scenarios. Users of PoDoFo, particularly those employing version 0.9.6-rc1, should be aware of this risk and take necessary precautions.

References

https://bugzilla.redhat.com/show_bug.cgi?id=1595689
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.