Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7q72-8f9r-v4mw

Опубликовано: 01 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted PDF file.

A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted PDF file.

EPSS

Процентиль: 26%
0.00092
Низкий

8.1 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 8.1
ubuntu
4 месяца назад

A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Service (DoS) by supplying a crafted PDF file. NOTE: this is disputed by the Supplier because there is no available file to reproduce the issue.

CVSS3: 8.1
nvd
4 месяца назад

A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Service (DoS) by supplying a crafted PDF file. NOTE: this is disputed by the Supplier because there is no available file to reproduce the issue.

CVSS3: 8.1
debian
4 месяца назад

A heap-use-after free in the PdfTokenizer::ReadDictionary function of ...

EPSS

Процентиль: 26%
0.00092
Низкий

8.1 High

CVSS3

Дефекты

CWE-416