VULNERABILITY INTELLIGENCE

CVE-2018-12983

CVSS score7.8 HIGH
EPSS probability0.98%
CISA KEVNot currently listed
Published2018-06-29
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey() function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file.

Weakness classification

  • CWE-125: Out-of-bounds Read

Primary references