CVE-2018-5308 PUBLISHED

PoDoFo 0.9.5 does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function (base/PdfOutputStream.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.

EPSS 1.01% · 76.9th percentile

Risk Scores

EPSS Score
1.01%
76.9th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:22.04:LTSlibpodofo0.9.7+dfsg-3, 0.9.7+dfsg-2build2, 0
Ubuntu:Pro:16.04:LTSlibpodofo0.9.0-1.3, 0.9.3-3, 0.9.3-4
Ubuntu:Pro:20.04:LTSlibpodofo0, 0.9.6+dfsg-5, 0.9.6+dfsg-5build1
Ubuntu:Pro:14.04:LTSlibpodofo0, 0.9.0-1.2ubuntu0.1~esm1, 0.9.0-1.2

Timeline

References

Open in Interactive Console →