Approved changes feed: RSS · Atom

cpe:2.3:a:podofo_project:podofo:0.9.5:*:*:*:*:*:*:*

part: a version: 0.9.5 update: *

VendorPodofo Project (40c7dbff-a5d2-5da1-b5ac-4a37194a5f17)
ProductPodofo (5171c380-d6f1-5d7c-9d2f-ee6cb330773d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/mekentosj/podofo purl2cpe 2026-06-01 10:16:20.271396
pkg:rpm/fedora/podofo purl2cpe 2026-06-01 10:16:20.271397
pkg:rpm/opensuse/podofo purl2cpe 2026-06-01 10:16:20.271399
pkg:sourceforge/podofo purl2cpe 2026-06-01 10:16:20.271400

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-8002 vulnerable 2026-06-08 05:12:04.922425 Details available
In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.
Published: 2018-03-09T19:00:00.000Z
Updated: 2024-08-05T06:37:59.614Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8001 vulnerable 2026-06-08 05:12:04.922005 Details available
In PoDoFo 0.9.5, there exists a heap-based buffer over-read vulnerability in UnescapeName() in PdfName.cpp. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.
Published: 2018-03-09T19:00:00.000Z
Updated: 2024-08-05T06:37:59.617Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8000 vulnerable 2026-06-08 05:12:04.921494 Details available
In PoDoFo 0.9.5, there exists a heap-based buffer overflow vulnerability in PoDoFo::PdfTokenizer::GetNextToken() in PdfTokenizer.cpp, a related issue to CVE-2017-5886. Remote attackers could leverage this vulnerability to cause a denial-of-service or potentially execute arbitrary code via a crafted pdf file.
Published: 2018-03-09T19:00:00.000Z
Updated: 2024-08-05T06:37:59.662Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6352 vulnerable 2026-06-08 05:11:53.635627 Details available
In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file.
Published: 2018-01-27T15:00:00.000Z
Updated: 2024-08-05T06:01:48.988Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5783 vulnerable 2026-06-08 05:11:51.935436 Details available
In PoDoFo 0.9.5, there is an uncontrolled memory allocation in the PoDoFo::PdfVecObjects::Reserve function (base/PdfVecObjects.h). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted pdf file.
Published: 2018-01-19T08:00:00.000Z
Updated: 2024-08-05T05:47:55.646Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5309 vulnerable 2026-06-08 05:11:50.591436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5308 vulnerable 2026-06-08 05:11:50.591012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5296 vulnerable 2026-06-08 05:11:50.579188 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5295 vulnerable 2026-06-08 05:11:50.578770 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11256 vulnerable 2026-06-08 05:10:38.050780 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11255 vulnerable 2026-06-08 05:10:38.050473 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11254 vulnerable 2026-06-08 05:10:38.050099 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8787 vulnerable 2026-06-08 05:10:08.899788 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8378 vulnerable 2026-06-08 05:10:08.150547 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8054 vulnerable 2026-06-08 05:10:07.102711 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8053 vulnerable 2026-06-08 05:10:07.102287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7994 vulnerable 2026-06-08 05:10:06.822688 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7383 vulnerable 2026-06-08 05:09:55.815469 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7382 vulnerable 2026-06-08 05:09:55.815072 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7381 vulnerable 2026-06-08 05:09:55.814757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7380 vulnerable 2026-06-08 05:09:55.814362 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7379 vulnerable 2026-06-08 05:09:55.814050 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7378 vulnerable 2026-06-08 05:09:55.813644 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6848 vulnerable 2026-06-08 05:09:55.025811 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6842 vulnerable 2026-06-08 05:09:55.023964 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6841 vulnerable 2026-06-08 05:09:55.023655 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6840 vulnerable 2026-06-08 05:09:55.023257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.