itext/itext7 · Security
Out-of-bounds Write in iText
- GHSA ID
- GHSA-c32g-2mgr-cfq7
- CVE ID
- CVE-2022-24197
- Severity
- medium
- Published
- Updated
- CVSS
- 6.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- CVSS v3
- 6.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Description
iText v7.1.17 was discovered to contain a stack-based buffer overflow via the component ByteBuffer.append, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.
CWEs
- CWE-787 · Out-of-bounds Write