Segmentation Violation in PoDoFo Library Affecting PdfObject Functionality
CVE-2023-31555

6.5MEDIUM

Key Information:

Vendor: Podofo Project
Status: Podofo
Vendor: CVE Published:; 10 May 2023

🔔 Create Podofo Project Vulnerability Alert

What is CVE-2023-31555?

A vulnerability has been identified in the PoDoFo library, specifically in version 0.10.0, characterized by a segmentation violation occurring in the PoDoFo::PdfObject::DelayedLoad function. This issue poses risks related to unintended behavior and potential crashes when handling PDF objects, necessitating immediate attention for users relying on this library for PDF manipulation.

References

https://github.com/podofo/podofo/issues/67

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 10, 2023
Vulnerability Reserved
Apr 29, 2023

CVE-2023-31555 Data

JSON