CVE-2018-5296

Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.5

Description The issue is related to an uncontrolled memory allocation in the PdfParser::ReadXRefSubsection function. This could allow remote attackers to cause a denial-of-service by providing a crafted pdf file.

Recommendations For PoDoFo version 0.9.5, consider applying a patch or fix that controls memory allocation in the PdfParser::ReadXRefSubsection function to prevent denial-of-service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.