Memory Allocation Vulnerability in PoDoFo Library
CVE-2019-10723

5.5MEDIUM

Key Information:

Vendor

Podofo Project

Status
Podofo
Vendor
CVE Published:
3 April 2019

What is CVE-2019-10723?

A vulnerability in the PoDoFo Library version 0.9.6 allows for an unvalidated memory allocation in the PdfPagesTreeCache class. This issue can lead to excess memory consumption, potentially enabling attackers to exploit the flaw. Proper validation and handling of memory requests are crucial to mitigating this vulnerability and ensuring the integrity of document processing.

References

https://sourceforge.net/p/podofo/tickets/46/
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.