Read the docs
TI-2023-02101 Aliases CVE-2023-2241GHSA-v8x8-32r8-5x52

PoDoFo PdfXRefStreamParserObject.cpp readXRefStreamEntry heap-based overflow

Priority HIGH 69CWE-122Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-122 and the CVSS impact.

Summary

A vulnerability, which was classified as critical, was found in PoDoFo 0.10.0. Affected is the function readXRefStreamEntry of the file PdfXRefStreamParserObject.cpp. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is identified as 535a786f124b739e3c857529cecc29e4eeb79778. It is recommended to apply a patch to fix this issue. VDB-227226 is the identifier assigned to this vulnerability.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00372 31st percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD and the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—PoDoFo0.10.0—No fix listedCNA
  • PoDoFo Vendor— Affected 0.10.0 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:podofo_project:podofo:0.10.0:*:*:*:*:*:*:*0.10.0VulnerablePodofo Project
  • cpe:2.3:a:podofo_project:podofo:0.10.0:*:*:*:*:*:*:* Versions 0.10.0 Vulnerable ·Podofo Project

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-2241
  2. 2026-10-03 Alias added: GHSA-v8x8-32r8-5x52

References

Exploit 2

Patch 1

  • TI-2023-15119 Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component… CVSS 3.1HIGH 8.8
  • TI-2023-15118 Podofo v0.10.0 was discovered to contain a heap-use-after-free via the component… CVSS 3.1HIGH 8.8
  • TI-2023-15117 podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function… CVSS 3.1HIGH 8.8
  • TI-2025-28974 A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to… CVSS 3.1HIGH 8.1
  • TI-2025-08606 PoDoFo PDF Dictionary PdfTokenizer.cpp DetermineDataType use after free CVSS 4.0MEDIUM 4.8
  • TI-2018-05779 In PoDoFo 0.9.5, there exists an infinite loop vulnerability in… CVSS 3.0HIGH 8.8
See all 62 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences