Description (CNA)
A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Service (DoS) by supplying a crafted PDF file. NOTE: this is disputed by the Supplier because there is no available file to reproduce the issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/podofo/podofo
- https://github.com/ShadowByte1/CVE-Reports/blob/main/CVE-2025-46205.md
- https://github.com/ShadowByte1/CVE-Reports/issues/1
ADP enrichment
No English description supplied.
No references supplied.