📦 Podofo

by Podofo Project

🔍 What is Podofo?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2025-46205

HIGH CVSS 8.1 Oct 1, 2025

A heap-use-after-free vulnerability in PoDoFo PDF library's PdfTokenizer::ReadDictionary function allows attackers to cause Denial of Service (DoS) by processing a malicious PDF file. This affects sys...

CVE-2023-31566

HIGH CVSS 8.8 May 10, 2023

CVE-2023-31566 is a heap-use-after-free vulnerability in PoDoFo PDF library's encryption component. This allows attackers to potentially execute arbitrary code or cause denial of service by exploiting...

CVE-2023-31568

HIGH CVSS 8.8 May 10, 2023

CVE-2023-31568 is a heap buffer overflow vulnerability in PoDoFo's RC4 encryption implementation that allows attackers to execute arbitrary code or cause denial of service. This affects applications u...

CVE-2021-30472

HIGH CVSS 7.8 May 26, 2021

CVE-2021-30472 is a stack-based buffer overflow vulnerability in PoDoFo, a PDF manipulation library, due to improper validation of key length in the encryption function. It allows attackers to execute...

CVE-2025-9394

MEDIUM CVSS 5.3 Aug 24, 2025

A use-after-free vulnerability in PoDoFo's PDF dictionary parser allows local attackers to potentially execute arbitrary code or cause denial of service. This affects applications using PoDoFo 1.1.0-d...