Libpodofo: From version 1.0.0 until 1.1.1, processing a crafted PDF with an Indexed color-space image can cause a heap out-of-bounds read in… (CVE-2026-54633)
Libpodofo versions from 1.0.0 up to 1.1.1 contain a heap out-of-bounds read vulnerability when processing crafted PDFs with Indexed color-space images. The flaw arises due to improper bounds checking in PdfColorSpaceFilterIndexed::FetchScanLine and incorrect validation of color-space metadata, potentially leading to disclosure of adjacent heap data or application crashes. This issue is fixed in version 1.1.1.
AI Analysis
Technical Summary
PoDoFo, a C++17 PDF manipulation library, versions 1.0.0 through 1.1.1 have a vulnerability where processing a crafted PDF containing an Indexed color-space image causes a heap out-of-bounds read in the function PdfColorSpaceFilterIndexed::FetchScanLine. The macro PODOFO_INVARIANT does not enforce runtime bounds checking, allowing pixel indices equal to or greater than m_MapSize to access memory beyond m_lookup. Additionally, PdfColorSpaceFilterFactory::TryCreateFromObject incorrectly validates the 'hival' parameter with a flawed conjunction and lacks an upper bound check, permitting malformed Indexed color-space metadata outside the expected range. This vulnerability can lead to disclosure of adjacent heap memory or cause the processing application to crash. The vulnerability is resolved in version 1.1.1.
Potential Impact
Exploitation of this vulnerability can result in a heap out-of-bounds read, which may disclose adjacent heap memory contents or cause the application processing the PDF to crash. There is no indication of privilege escalation or remote code execution. The impact is limited to information disclosure and denial of service.
Mitigation Recommendations
Upgrade libpodofo to version 1.1.1 or later, where this vulnerability is fixed. No other mitigations are indicated or required.
Libpodofo: From version 1.0.0 until 1.1.1, processing a crafted PDF with an Indexed color-space image can cause a heap out-of-bounds read in… (CVE-2026-54633)
Description
Libpodofo versions from 1.0.0 up to 1.1.1 contain a heap out-of-bounds read vulnerability when processing crafted PDFs with Indexed color-space images. The flaw arises due to improper bounds checking in PdfColorSpaceFilterIndexed::FetchScanLine and incorrect validation of color-space metadata, potentially leading to disclosure of adjacent heap data or application crashes. This issue is fixed in version 1.1.1.
CVSS v4.0
Affected software
pkg:deb/ubuntu/libpodofo?arch=source&distro=esm-infra-legacy/trustypkg:deb/ubuntu/libpodofo?arch=source&distro=esm-apps/xenialpkg:deb/ubuntu/libpodofo?arch=source&distro=esm-apps/bionicpkg:deb/ubuntu/libpodofo?arch=source&distro=esm-apps/focalpkg:deb/ubuntu/libpodofo?arch=source&distro=esm-apps/jammypkg:deb/ubuntu/libpodofo?arch=source&distro=noblepkg:deb/ubuntu/libpodofo?arch=source&distro=resoluteRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
PoDoFo, a C++17 PDF manipulation library, versions 1.0.0 through 1.1.1 have a vulnerability where processing a crafted PDF containing an Indexed color-space image causes a heap out-of-bounds read in the function PdfColorSpaceFilterIndexed::FetchScanLine. The macro PODOFO_INVARIANT does not enforce runtime bounds checking, allowing pixel indices equal to or greater than m_MapSize to access memory beyond m_lookup. Additionally, PdfColorSpaceFilterFactory::TryCreateFromObject incorrectly validates the 'hival' parameter with a flawed conjunction and lacks an upper bound check, permitting malformed Indexed color-space metadata outside the expected range. This vulnerability can lead to disclosure of adjacent heap memory or cause the processing application to crash. The vulnerability is resolved in version 1.1.1.
Potential Impact
Exploitation of this vulnerability can result in a heap out-of-bounds read, which may disclose adjacent heap memory contents or cause the application processing the PDF to crash. There is no indication of privilege escalation or remote code execution. The impact is limited to information disclosure and denial of service.
Mitigation Recommendations
Upgrade libpodofo to version 1.1.1 or later, where this vulnerability is fixed. No other mitigations are indicated or required.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- UBUNTU-CVE-2026-54633
- Osv Schema Version
- 1.7.0
- Ecosystems
- ["Ubuntu:Pro:14.04:LTS","Ubuntu:Pro:16.04:LTS","Ubuntu:Pro:18.04:LTS","Ubuntu:Pro:20.04:LTS","Ubuntu:Pro:22.04:LTS","Ubuntu:24.04:LTS","Ubuntu:26.04:LTS"]
- Cvss Version
- 4.0
Threat ID: 6ab4be64f7a7c54106f0d3b5
Added to database: 09/24/2026, 06:08:36 UTC
Last enriched: 09/24/2026, 06:50:42 UTC
Last updated: 09/25/2026, 01:47:43 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.