High severity8.1NVD Advisory· Published Oct 1, 2025· Updated Jun 17, 2026
CVE-2025-46205
CVE-2025-46205
Description
A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Service (DoS) by supplying a crafted PDF file. NOTE: this is disputed by the Supplier because there is no available file to reproduce the issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:podofo_project:podofo:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:podofo_project:podofo:*:*:*:*:*:*:*:*range: >=0.10.0,<=0.10.5
- (no CPE)
- (no CPE)range: v0.10.0 to v0.10.5
Patches
Vulnerability mechanics
References
2- github.com/ShadowByte1/CVE-Reports/blob/main/CVE-2025-46205.mdnvdExploitThird Party Advisory
- github.com/ShadowByte1/CVE-Reports/issues/1nvd
News mentions
0No linked articles in our index yet.