CVE-2018-11254

An issue was discovered in PoDoFo 0.9.5. There is an Excessive Recursion in the PdfPagesTree::GetPageNode() function of PdfPagesTree.cpp. Remote attackers could leverage this vulnerability to cause a denial of service through a crafted pdf file, a related issue to CVE-2017-8054.

• CWE-674

• https://bugzilla.redhat.com/show_bug.cgi?id=1576174Issue Tracking
• https://bugzilla.redhat.com/show_bug.cgi?id=1576174Issue Tracking

Published

May 18, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11245app/webroot/js/misp.js in MISP 2.4.91 has a DOM based XSS wi…
• CVE-2018-11246K7TSMngr.exe in K7Computing K7AntiVirus Premium 15.1.0.53 ha…7.5
• CVE-2018-11247The JMX/RMI interface in Nasdaq BWise 5.0 does not require a…
• CVE-2018-11248util/FileDownloadUtils.java in FileDownloader 1.7.3 does not…
• CVE-2018-1125procps-ng before version 3.3.15 is vulnerable to a stack buf…7.5
• CVE-2018-11251In ImageMagick 7.0.7-23 Q16 x86_64 2018-01-24, there is a he…
• CVE-2018-11255An issue was discovered in PoDoFo 0.9.5. The function PdfPag…
• CVE-2018-11256An issue was discovered in PoDoFo 0.9.5. The function PdfDoc…
• CVE-2018-11257Permissions, Privileges, and Access Controls in TA in Snapdr…
• CVE-2018-11258In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and …
• CVE-2018-11259Due to Improper Access Control of NAND-based EFS in Snapdrag…
• CVE-2018-1126procps-ng before version 3.3.15 is vulnerable to an incorrec…4.8