Stack Overflow Vulnerability in PoDoFo by Artifex Software
CVE-2021-30471

5.5MEDIUM

Key Information:

Vendor

Podofo Project

Status
Podofo
Vendor
CVE Published:
26 May 2021

What is CVE-2021-30471?

A vulnerability in PoDoFo version 0.9.7 arises from uncontrolled recursive calls in the PdfNamesTree::AddToDictionary function, potentially causing a stack overflow. If exploited, this flaw can lead to system instability, affecting applications relying on PoDoFo for PDF document processing. It highlights the need for developers to be aware of and address such issues to enhance software reliability.

Affected Version(s)

podofo PoDoFo 0.9.7

References

https://bugzilla.redhat.com/show_bug.cgi?id=1947441
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.