Bug 2477494 (CVE-2026-44348) - CVE-2026-44348 podofo: PoDoFo: Denial of service due to double-free vulnerability
Summary: CVE-2026-44348 podofo: PoDoFo: Denial of service due to double-free vulnerabi...
Keywords:
Status: NEW
Alias: CVE-2026-44348
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2477832 2477834 2477835 2477833
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-05-14 17:01 UTC by OSIDB Bzimport
Modified: 2026-05-15 11:45 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-05-14 17:01:46 UTC 
PoDoFo is a C++17 PDF manipulation library. From 1.0.0 to before 1.0.4, a double-free vulnerability exists in compute_hash_to_sign() in src/podofo/private/OpenSSLInternal_Ripped.cpp. If EVP_DigestFinal fails after buf has already been freed, the Error label frees buf a second time, causing heap corruption. This vulnerability is fixed in 1.0.4.
Note You need to log in before you can comment on or make changes to this bug.