CVE-2018-12983: Podofo Project Podofo

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey() function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file.

Affected products

• Podofo Project Podofo: version 0.9.6 only

Published 2018-06-29. Last modified 2026-06-17.