PT-2025-40287
CVE-2025-46205
·
Published
2025-10-01
·
Updated
2025-10-27
Description by
CVSS 3.1
8.1
HighMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
podofo versions 0.10.0 through 0.10.5
Description
A heap-use-after-free issue exists in the
PdfTokenizer::ReadDictionary function. This allows attackers to potentially cause a Denial of Service (DoS) by providing a specially crafted PDF file.Recommendations
Update podofo to a version newer than 0.10.5.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾