itext/itext7 · Security
Allocation of Resources Without Limits or Throttling in iText
- GHSA ID
- GHSA-hhh6-cm2m-3fhc
- CVE ID
- CVE-2022-24196
- Severity
- medium
- Published
- Updated
- CVSS
- 6.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- CVSS v3
- 6.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Description
iText v7.1.17 was discovered to contain an out-of-memory error via the component readStreamBytesRaw, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.
CWEs
- CWE-770 · Allocation of Resources Without Limits or Throttling