| Package | Affected versions | Patched versions |
|---|---|---|
| podofo | ≥ 0.10.0, ≤ 0.10.5 |
A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Service (DoS) by supplying a crafted PDF file. NOTE: this is disputed by the Supplier because there is no available file to reproduce the issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free