SUSE-SU-2026:4311-1: podofo&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Linux Enterprise

CVSS: UnknownPublished
Published 23-09-2026Last modified 24-09-2026
Open JSON

Vulnerability summary

SUSE-SU-2026:4311-1 is a vulnerability in podofo&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 4 · Downstream 0 · Related 4
CVE-2018-8002CVE-2020-18971CVE-2021-30470CVE-2021-30471

Timeline

  1. 23-09-2026
    PublishedVulnerability first disclosed.
  2. 24-09-2026
    Last modifiedVulnerability information updated.

Description

Security update for podofo This update for podofo fixes the following issues: - CVE-2018-8002: infinite loop vulnerability in ParseFileComplete() (bsc#1084891). - CVE-2020-18971: stack-based buffer overflow in src/base/PdfDictionary.cpp (bsc#1190178). - CVE-2021-30470: uncontrolled recursive call of funtions in src/base/PdfTokenizer.cpp can lead to a stack overflow (bsc#1186588). - CVE-2021-30471: uncontrolled recursive call in PdfNamesTree:AddToDictionary function in src/podofo/doc/PdfNamesTree.cpp (bsc#1184645).

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse1 product
  • podofo&distro=SUSE Linux Enterprise Module for Package Hub 15 SP7< 0.9.6-150300.3.18.1

1 vendor · 1 product

References

9 links