Approved changes feed: RSS · Atom

cpe:2.3:a:podofo_project:podofo:0.9.6:rc1:*:*:*:*:*:*

part: a version: 0.9.6 update: rc1

VendorPodofo Project (40c7dbff-a5d2-5da1-b5ac-4a37194a5f17)
ProductPodofo (5171c380-d6f1-5d7c-9d2f-ee6cb330773d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/mekentosj/podofo purl2cpe 2026-06-01 10:16:20.271412
pkg:rpm/fedora/podofo purl2cpe 2026-06-01 10:16:20.271414
pkg:rpm/opensuse/podofo purl2cpe 2026-06-01 10:16:20.271415
pkg:sourceforge/podofo purl2cpe 2026-06-01 10:16:20.271417

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-12983 vulnerable 2026-06-08 05:10:42.180146 Details available
A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey() function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file.
Published: 2018-06-29T05:00:00.000Z
Updated: 2024-08-05T08:52:49.225Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-12982 vulnerable 2026-06-08 05:10:42.179720 Details available
Invalid memory read in the PoDoFo::PdfVariant::DelayedLoad() function in PdfVariant.h in PoDoFo 0.9.6-rc1 allows remote attackers to have denial-of-service impact via a crafted file.
Published: 2018-06-29T05:00:00.000Z
Updated: 2024-08-05T08:52:49.223Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.