CVE-2018-5308

Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.5

Description The issue arises from improper validation of memcpy arguments in the PdfMemoryOutputStream::Write function. This could allow remote attackers to cause a denial-of-service or possibly other unspecified impacts by using a crafted pdf file.

Recommendations For PoDoFo version 0.9.5, update to a newer version that addresses this issue, as the current version does not properly validate memcpy arguments in the PdfMemoryOutputStream::Write function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.