Podofo

3 CVEs in 2 Podofo products, including Podofo, Podofo Podofo. Newest: CVE-2026-54633 (2026-09-17). Severity, EPSS and public exploits for each.

Podofo products with known CVEs

ProductCVEs
Podofo2
Podofo Podofo1
Podofo CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-546332026-09-17PoDoFo is a C++17 PDF manipulation library. From version 1.0.0 until 1.1.1, processing a crafted PDF with an Indexed color-space image can cause a heap out-of-…
CVE-2026-44348Low2.52026-05-14PoDoFo is a C++17 PDF manipulation library. From 1.0.0 to before 1.0.4, a double-free vulnerability exists in compute_hash_to_sign() in src/podofo/private/Open…
CVE-2018-14320Medium6.52018-09-17This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of PoDoFo. User interaction is required to exploit thi…