CVE-2026-44348— PoDoFo: Double-free vulnerability in compute_hash_to_sign()
Possible ATT&CK Techniques 2AI
T1190 · Exploit Public-Facing Application T1203 · Exploitation for Client ExecutionGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-44348
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
PoDoFo: Double-free vulnerability in compute_hash_to_sign()
Source: NVD (National Vulnerability Database)
Vulnerability Description
PoDoFo is a C++17 PDF manipulation library. From 1.0.0 to before 1.0.4, a double-free vulnerability exists in compute_hash_to_sign() in src/podofo/private/OpenSSLInternal_Ripped.cpp. If EVP_DigestFinal fails after buf has already been freed, the Error label frees buf a second time, causing heap corruption. This vulnerability is fixed in 1.0.4.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
双重释放
Source: NVD (National Vulnerability Database)
Vulnerability Title
PoDoFo 资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PoDoFo是PoDoFo开源的一个免费的可移植 C++ 库。 PoDoFo 1.0.0至1.0.4之前版本存在资源管理错误漏洞，该漏洞源于compute_hash_to_sign函数中存在双重释放，当EVP_DigestFinal在buf已被释放后失败时，Error标签再次释放buf导致堆损坏。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-44348
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-44348
请登录查看更多情报信息。
- https://github.com/podofo/podofo/security/advisories/GHSA-8fq6-rqpv-xq72x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2026-44348
IV. Related Vulnerabilities
Same vendor: podofo
Same weakness: CWE-415
- CVE-2020-37239
libbabl 0.1.62 Broken Double Free Detection Memory Safety - CVE-2026-34341
Windows Link-Layer Discovery Protocol (LLDP) Elevation of Pr - CVE-2026-33838
Windows Message Queuing (MSMQ) Elevation of Privilege Vulner - CVE-2026-32170
Windows Rich Text Edit Elevation of Privilege Vulnerability - CVE-2026-21530
Windows Rich Text Edit Elevation of Privilege Vulnerability
V. Comments for CVE-2026-44348
No comments yet