Skip to content
OpenAdvisories

Vendor

podofo

3 known vulnerabilities.

Products

podofo 2 PoDoFo PoDoFo 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.5
    CVE-2026-44348

    PoDoFo: Double-free vulnerability in compute_hash_to_sign()

    PoDoFo is a C++17 PDF manipulation library. From 1.0.0 to before 1.0.4, a double-free vulnerability exists in compute_hash_to_sign() in src/podofo/private/OpenSSLInternal_Ripped.cpp. If EVP_DigestFinal fails after buf has already been freed, the Error label f…

    podofo podofo libpodofo Ubuntu