GitHub Advisoryadvisory · Maven

GHSA-fg3j-q579-v8x4 Uncontrolled memory consumption

MEDIUM Published 2021-06-15 Modified 2022-02-08 Official page ↗
Aliases
CVE-2021-31811
Ecosystem
Maven
Packages
org.apache.pdfbox:pdfbox, org.apache.pdfbox:pdfbox-parent
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses
CWE-770, CWE-789
Reviewed
2021-06-14

Affected packages

• Maven org.apache.pdfbox:pdfbox: >= 2.0.0, < 2.0.24 → fixed in 2.0.24 • Maven org.apache.pdfbox:pdfbox-parent: >= 2.0.0, < 2.0.24 → fixed in 2.0.24

Description

In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

Related

Alias · CVE (1)

  • CVE-2021-31811 In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. vulnerability

Weakness · CWE (2)

  • CWE-770 Allocation of Resources Without Limits or Throttling weakness
  • CWE-789 Memory Allocation with Excessive Size Value weakness

References