CVE-2018-5295

In PoDoFo 0.9.5, there is an integer overflow in the PdfXRefStreamParserObject::ParseStream function (base/PdfXRefStreamParserObject.cpp). Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted pdf file.

• CWE-190

• https://bugzilla.redhat.com/show_bug.cgi?id=1531897Exploit, Issue Tracking, Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1531897Exploit, Issue Tracking, Mailing List, Third Party Advisory

Published

Jan 8, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5289The GD Rating System plugin 2.3 for WordPress has Directory …
• CVE-2018-5290The GD Rating System plugin 2.3 for WordPress has Directory …
• CVE-2018-5291The GD Rating System plugin 2.3 for WordPress has Directory …
• CVE-2018-5292The GD Rating System plugin 2.3 for WordPress has XSS via th…
• CVE-2018-5293The GD Rating System plugin 2.3 for WordPress has XSS via th…
• CVE-2018-5294In libming 0.4.8, there is an integer overflow (caused by an…
• CVE-2018-5296In PoDoFo 0.9.5, there is an uncontrolled memory allocation …
• CVE-2018-5298In the Procter & Gamble "Oral-B App" (aka com.pg.oralb.oralb…
• CVE-2018-5299A stack-based Buffer Overflow Vulnerability exists in the we…
• CVE-2018-5301Magento Community Edition and Enterprise Edition before 2.0.…
• CVE-2018-5303An issue was discovered on the Impinj Speedway Connect R420 …
• CVE-2018-5304An issue was discovered on the Impinj Speedway Connect R420 …