CVE-2019-9199: Fedoraproject Fedora

High severity, CVSS 8.8. EPSS: 2.6% chance of exploitation in the next 30 days.

PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator.cpp in PoDoFo 0.9.6 has a NULL pointer dereference that can (for example) be triggered by sending a crafted PDF file to the podofoimpose binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.

Affected products

• Fedoraproject Fedora: version 29 only; version 30 only
• Podofo Project Podofo: version 0.9.6 only

Published 2019-02-26. Last modified 2026-06-17.