CVE-2018-5309

Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.5

Description The issue is related to an integer overflow in the PdfObjectStreamParserObject::ReadObjectsFromStream function. Remote attackers could leverage this to cause a denial-of-service via a crafted pdf file.

Recommendations For PoDoFo version 0.9.5, consider avoiding the use of the PdfObjectStreamParserObject::ReadObjectsFromStream function until a patch is available. As a temporary workaround, restrict the processing of crafted pdf files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.