GitStock

apache/pdfbox · Security

Uncontrolled Memory Allocation in Apache PDFBox

GHSA ID
GHSA-6vqp-h455-42mr
CVE ID
CVE-2021-27906
Severity
medium
Published
Updated
CVSS
5.5 · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v3
5.5 · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Description

A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.

CWEs

  • CWE-789 · Memory Allocation with Excessive Size Value

References