CVE-2018-8002
libpodofo0.9.5: In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObje...
CVE-2018-8002 is fixed in 5 products on 1 platform, first by libpodofo-utils 0.9.5-9ubuntu0.1~esm1, released April 3, 2019. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0801
94th percentile
In PoDoFo 0.9.5, there exists an infinite loop vulnerability in PdfParserObject::ParseFileComplete() in PdfParserObject.cpp which may result in stack overflow. Remote attackers could leverage this vulnerability to cause a denial-of-service or possibly unspecified other impact via a crafted pdf file.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libpodofo-utils · Ubuntu 18.04.6 LTS (bionic) | 0.9.5-9ubuntu0.1~esm1 | libpodofo-utils 0.9.5-9ubuntu0.1~esm1 | Apr 3, 2019 |
| libpodofo-utils · Ubuntu 20.04 LTS (focal) | 0.9.6+dfsg-5ubuntu0.1~esm1 | libpodofo-utils 0.9.6+dfsg-5ubuntu0.1~esm1 | Aug 25, 2021 |
| libpodofo-utils · Ubuntu 22.04.1 LTS (jammy) | 0.9.7+dfsg-3ubuntu0.1~esm1 | libpodofo-utils 0.9.7+dfsg-3ubuntu0.1~esm1 | Aug 25, 2021 |
| libpodofo0.9.5 · Ubuntu 18.04.6 LTS (bionic) | 0.9.5-9ubuntu0.1~esm1 | libpodofo0.9.5 0.9.5-9ubuntu0.1~esm1 | Apr 3, 2019 |
| libpodofo0.9.6 · Ubuntu 20.04 LTS (focal) | 0.9.6+dfsg-5ubuntu0.1~esm1 | libpodofo0.9.6 0.9.6+dfsg-5ubuntu0.1~esm1 | Aug 25, 2021 |
| libpodofo0.9.7 · Ubuntu 22.04.1 LTS (jammy) | 0.9.7+dfsg-3ubuntu0.1~esm1 | libpodofo0.9.7 0.9.7+dfsg-3ubuntu0.1~esm1 | Aug 25, 2021 |
| podofo · sles 15.7 | 0.9.6-150300.3.18.1 | SUSE-SU-2026:4311-1 | Sep 23, 2026 |