CVE-2019-9199

Name of the Vulnerable Software and Affected Versions PoDoFo version 0.9.6

Description The issue is related to a NULL pointer dereference in the setSource() function, which can be triggered by sending a crafted PDF file. This can cause a Denial of Service (Segmentation fault) or possibly have other unspecified impacts.

Recommendations For PoDoFo version 0.9.6, consider avoiding the use of the setSource() function in PdfTranslator until a patch is available. As a temporary workaround, restrict the input to the podofoimpose binary to prevent crafted PDF files from being processed.