CVE-2019-20093
The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote...
The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file, because of ImageExtractor.cpp.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file, because of ImageExtractor.cpp.
- Record
CVE-2019-20093- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-476
- Updated
- 2026-11-02
CVE List No score
The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file, because of ImageExtractor.cpp.
- Record
CVE-2019-20093- Updated
- 2026-11-02
EUVDEUVD-2019-10649 No score
The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file, because of ImageExtractor.cpp.
- Record
EUVD-2019-10649- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9h85-988j-4f98
The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote...
The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file, because of ImageExtractor.cpp.
- Record
GHSA-9h85-988j-4f98- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
OSVALPINE-CVE-2019-20093
The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file, because of ImageExtractor.cpp.
- Record
ALPINE-CVE-2019-20093- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSV
The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file, because of ImageExtractor.cpp.
- Record
CVE-2019-20093- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 6 moreShow less
OSVDEBIAN-CVE-2019-20093
The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file, because of ImageExtractor.cpp.
- Record
DEBIAN-CVE-2019-20093- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-20093
The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file, because of ImageExtractor.cpp.
- Record
UBUNTU-CVE-2019-20093- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2020-0294 No score
Updated podofo packages fix security vulnerability
The updated packages fix security vulnerabilities:
A stack-based buffer over-read in the PdfEncryptMD5Base::ComputeEncryptionKey() function in PdfEncrypt.cpp in PoDoFo 0.9.6-rc1 could be leveraged by remote attackers to cause a denial-of-service via a crafted pdf file. (CVE-2018-12983)
An issue was discovered in crop_page in PoDoFo 0.9.6. For a crafted PDF document, pPage->GetObject()->GetDictionary().AddKey(PdfName("MediaBox"),var) can be problematic due to the function GetObject() being called for the pPage NULL pointer object. The value of pPage at this point is 0x0, which causes a NULL pointer dereference. (CVE-2018-20751)
PoDoFo::Impose::PdfTranslator::setSource() in pdftranslator.cpp in PoDoFo 0.9.6 has a NULL pointer dereference that can (for example) be triggered by sending a crafted PDF file to the podofoimpose binary. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact. (CVE-2019-9199)
PoDoFo 0.9.6 has a heap-based buffer overflow in PdfString::ConvertUTF16toUTF8 in base/PdfString.cpp. (CVE-2019-9687)
The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file, because of ImageExtractor.cpp. (CVE-2019-20093)
- Record
MGASA-2020-0294- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14278-1 No score
libpodofo-devel-0.10.3-2.1 on GA media
These are all security issues fixed in the libpodofo-devel-0.10.3-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14278-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1316-1 No score
Security update for podofo
This update for podofo fixes the following issues:
- CVE-2019-20093: Fixed an invalid memory access that could cause an application crash (bsc#1159921).
- Record
SUSE-SU-2022:1316-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1690-1 No score
Security update for podofo
This update for podofo fixes the following issues:
- CVE-2019-20093: Fixed an invalid memory access that could cause an application crash (bsc#1159921).
- Record
SUSE-SU-2022:1690-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
podofoAlpine:v3.13 |
before 0.9.7-r0 | 0.9.7-r0 |
podofoAlpine:v3.14 |
before 0.9.7-r0 | 0.9.7-r0 |
podofoAlpine:v3.15 |
before 0.9.7-r0 | 0.9.7-r0 |
podofoAlpine:v3.16 |
before 0.9.7-r0 | 0.9.7-r0 |
podofoAlpine:v3.17 |
before 0.9.7-r0 | 0.9.7-r0 |
podofoAlpine:v3.18 |
before 0.9.7-r0 | 0.9.7-r0 |
podofoAlpine:v3.19 |
before 0.9.7-r0 | 0.9.7-r0 |
podofoAlpine:v3.20 |
before 0.9.7-r0 | 0.9.7-r0 |
podofoAlpine:v3.21 |
before 0.9.7-r0 | 0.9.7-r0 |
podofoAlpine:v3.22 |
before 0.9.7-r0 | 0.9.7-r0 |
Show 10 moreShow less
| Package | Affected | Fixed |
|---|---|---|
podofoAlpine:v3.23 |
before 0.9.7-r0 | 0.9.7-r0 |
podofoAlpine:v3.24 |
before 0.9.7-r0 | 0.9.7-r0 |
libpodofoDebian:12 |
before 0.9.8+dfsg-2 | 0.9.8+dfsg-2 |
libpodofoDebian:13 |
before 0.9.8+dfsg-2 | 0.9.8+dfsg-2 |
libpodofoDebian:14 |
before 0.9.8+dfsg-2 | 0.9.8+dfsg-2 |
podofoMageia:7 |
before 0.9.6-1.1.mga7 | 0.9.6-1.1.mga7 |
podofoopenSUSE:Leap 15.3 |
before 0.9.6-150300.3.3.1 | 0.9.6-150300.3.3.1 |
podofoSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 0.9.2-3.12.1 | 0.9.2-3.12.1 |
podofoSUSE:Linux Enterprise Workstation Extension 12 SP5 |
before 0.9.2-3.12.1 | 0.9.2-3.12.1 |
podofoopenSUSE:Tumbleweed |
before 0.10.3-2.1 | 0.10.3-2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, aliases, references | OSV | |
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-20093 is a medium vulnerability (CVSS 5.5) in Podofo Project Podofo, published December 30, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.36%, the 71st percentile. Fixed in podofo 0.9.7-r0.
References
sourceforge.net/p/podofo/tickets/75
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XHFOCBZCF3GX7A6FWE3JM7P37TQWGINJ
nvd.nist.gov/vuln/detail/CVE-2019-20093
Show 18 moreShow less
github.com/advisories/GHSA-9h85-988j-4f98
security.alpinelinux.org/vuln/CVE-2019-20093
security-tracker.debian.org/tracker/CVE-2019-20093
advisories.mageia.org/MGASA-2020-0294.html
bugs.mageia.org/show_bug.cgi?id=24385
suse.com/support/update/announcement/2022/suse-su-20221316-1
bugzilla.suse.com/1159921
ubuntu.com/security/CVE-2019-20093
cve.org/CVERecord?id=CVE-2019-20093