PoDoFo 0.9.6
Approved changes feed: RSS · Atom
cpe:2.3:a:podofo_project:podofo:0.9.6:*:*:*:*:*:*:*part: a version: 0.9.6 update: *
| Vendor | Podofo Project (40c7dbff-a5d2-5da1-b5ac-4a37194a5f17) |
|---|---|
| Product | Podofo (5171c380-d6f1-5d7c-9d2f-ee6cb330773d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/mekentosj/podofo |
purl2cpe | 2026-06-01 10:16:20.271401 |
pkg:rpm/fedora/podofo |
purl2cpe | 2026-06-01 10:16:20.271403 |
pkg:rpm/opensuse/podofo |
purl2cpe | 2026-06-01 10:16:20.271404 |
pkg:sourceforge/podofo |
purl2cpe | 2026-06-01 10:16:20.271405 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-9687 |
vulnerable | 2026-06-08 05:14:26.033810 |
Details available
PoDoFo 0.9.6 has a heap-based buffer overflow in PdfString::ConvertUTF16toUTF8 in base/PdfString.cpp.
Published: 2019-03-11T16:00:00.000Z
Updated: 2024-08-04T21:54:45.176Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9199 |
vulnerable | 2026-06-08 05:14:25.110503 |
Details available
PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator.cpp in PoDoFo 0.9.6 has a NULL pointer dereference that can (for example) be triggered by sending a crafted PDF file to the podofoimpose binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.
Published: 2019-02-26T00:00:00.000Z
Updated: 2024-08-04T21:38:46.611Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20093 |
vulnerable | 2026-06-08 05:13:30.480368 |
Details available
The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file, because of ImageExtractor.cpp.
Published: 2019-12-30T03:47:57.000Z
Updated: 2024-08-05T02:32:10.605Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10723 |
vulnerable | 2026-06-08 05:12:25.035093 |
Details available
An issue was discovered in PoDoFo 0.9.6. The PdfPagesTreeCache class in doc/PdfPagesTreeCache.cpp has an attempted excessive memory allocation because nInitialSize is not validated.
Published: 2019-04-03T17:01:04.000Z
Updated: 2024-08-04T22:32:01.435Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20797 |
vulnerable | 2026-06-08 05:11:27.961127 |
Details available
An issue was discovered in PoDoFo 0.9.6. There is an attempted excessive memory allocation in PoDoFo::podofo_calloc in base/PdfMemoryManagement.cpp when called from PoDoFo::PdfPredictorDecoder::PdfPredictorDecoder in base/PdfFiltersPrivate.cpp.
Published: 2019-02-27T17:00:00.000Z
Updated: 2024-08-05T12:12:27.267Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20751 |
vulnerable | 2026-06-08 05:11:27.830056 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19532 |
vulnerable | 2026-06-08 05:11:15.849645 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.