CVE-2021-30472: Podofo Project Podofo

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

A flaw was found in PoDoFo 0.9.7. A stack-based buffer overflow in PdfEncryptMD5Base::ComputeOwnerKey function in PdfEncrypt.cpp is possible because of a improper check of the keyLength value.

Affected products

• Podofo Project Podofo: version 0.9.7 only

Published 2021-05-26. Last modified 2026-06-17.