CVE-2018-19532 PUBLISHED

A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget() in pdftranslator.cpp of PoDoFo 0.9.6, while creating the PdfXObject, as demonstrated by podofoimpose. It allows an attacker to cause Denial of Service.

EPSS 0.34% · 56.2th percentile

Risk Scores

EPSS Score
0.34%
56.2th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:18.04:LTSlibpodofo0.9.5-9, 0.9.5-8build1, 0.9.5-8
Ubuntu:Pro:14.04:LTSlibpodofo0, 0.9.0-1.1ubuntu1, 0.9.0-1.2
Ubuntu:Pro:16.04:LTSlibpodofo0.9.3-4ubuntu0.1~esm1, 0.9.3-4, 0.9.3-3

Timeline

References

Open in Interactive Console →