CVE-2018-20797: Buffer Overflow
An issue was discovered in PoDoFo 0.9.6. There is an attempted excessive memory allocation in PoDoFo::podofocalloc in base/PdfMemoryManagement.cpp when called from PoDoFo::PdfPredictorDecoder::PdfPredictorDecoder in base/PdfFiltersPrivate.cpp.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/podofoto a version that resolves this vulnerability.Fixed in 0.9.7-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2018-20797?
CVE-2018-20797 is classified as a high severity vulnerability due to the potential for excessive memory allocation.
How do I fix CVE-2018-20797?
To remediate CVE-2018-20797, upgrade to a version of PoDoFo that is newer than 0.9.8.
What software is affected by CVE-2018-20797?
CVE-2018-20797 affects PoDoFo version 0.9.6 and certain versions of the libpodofo package.
What is the potential impact of CVE-2018-20797?
The potential impact of CVE-2018-20797 includes denial of service due to excessive memory allocation.
When was CVE-2018-20797 last updated?
CVE-2018-20797 was last updated on January 20, 2025.