Stack-based Buffer Overflow in PoDoFo Product from SourceForge
CVE-2020-18971

5.5MEDIUM

Key Information:

Vendor

Podofo Project

Status
Podofo
Vendor
CVE Published:
25 August 2021

What is CVE-2020-18971?

A stack-based buffer overflow vulnerability exists in the PoDoFo library version 0.9.6. This vulnerability arises from improper handling of data during operations in the PdfDictionary component, potentially allowing remote attackers to exploit the flaw to trigger a denial of service. This could destabilize the application and impact its availability, posing a significant threat to users relying on the affected version.

References

https://sourceforge.net/p/podofo/tickets/48/
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.