CVE-2018-19532: Null Pointer Dereference
A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget() in pdftranslator.cpp of PoDoFo 0.9.6, while creating the PdfXObject, as demonstrated by podofoimpose. It allows an attacker to cause Denial of Service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/podofoto a version that resolves this vulnerability.Fixed in 0.9.7-r0
Event History
Frequently Asked Questions
What is CVE-2018-19532?
CVE-2018-19532 is a NULL pointer dereference vulnerability in the function PdfTranslator::setTarget() in pdftranslator.cpp of PoDoFo 0.9.6.
How severe is CVE-2018-19532?
CVE-2018-19532 has a severity value of 8.8, categorized as high.
What software versions are affected by CVE-2018-19532?
PoDoFo 0.9.6 is affected by CVE-2018-19532.
What is the impact of CVE-2018-19532?
CVE-2018-19532 allows an attacker to cause Denial of Service.
Is there a fix available for CVE-2018-19532?
It is recommended to update to a patched version of PoDoFo to mitigate CVE-2018-19532 vulnerability.