GitHub Advisoryadvisory · Maven

GHSA-6vqp-h455-42mr Uncontrolled Memory Allocation in Apache PDFBox

MEDIUM Published 2021-05-13 Modified 2021-10-21 Official page ↗
Aliases
CVE-2021-27906
Ecosystem
Maven
Packages
org.apache.pdfbox:pdfbox
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses
CWE-789
Reviewed
2021-03-22

Affected packages

• Maven org.apache.pdfbox:pdfbox: >= 2.0.0, < 2.0.23 → fixed in 2.0.23

Description

A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.

Related

Alias · CVE (1)

  • CVE-2021-27906 A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. vulnerability

Weakness · CWE (1)

  • CWE-789 Memory Allocation with Excessive Size Value weakness

References