CVE-2023-2241

Katalog CVE

CVSS 5.3 · Medium EPSS 0,37%

Kerentanan Heap-based Buffer Overflow pada podofo project podofo. Skor CVSS 3.1 5.3 (Medium) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability, which was classified as critical, was found in PoDoFo 0.10.0. Affected is the function readXRefStreamEntry of the file PdfXRefStreamParserObject.cpp. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is identified as 535a786f124b739e3c857529cecc29e4eeb79778. It is recommended to apply a patch to fix this issue. VDB-227226 is the identifier assigned to this vulnerability.

Rincian

Terbit di NVD

22 April 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber vuldb.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-122: Heap-based Buffer Overflow
CWE-787: Out-of-bounds Write
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

0,37% peluang dieksploitasi; lebih tinggi dari 29,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/podofo/podofo/commit/535a786f124b739e3c857529cecc29e4eeb79778 patch
• https://github.com/podofo/podofo/issues/69 exploit · issue tracking · advisory pihak ketiga
• https://vuldb.com/?ctiid.227226 advisory pihak ketiga
• https://vuldb.com/?id.227226 advisory pihak ketiga
• https://github.com/podofo/podofo/files/11260976/poc-file.zip exploit