Skip to main content
← All vulnerabilities
CVE-2021-27807GHSA-2H3J-M7GR-25XJ

A carefully crafted PDF file can trigger an infinite loop while loading the file

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 2.0.23
None on Exploit-DB, Metasploit or GitHub

Summary

A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Apache Software Foundation Apache PDFBox

    through 2.0.22

  • org.apache.pdfbox:pdfboxMaven

    From 2.0.0 · fixed in 2.0.23

References 21

lists.apache.org

openwall.com

lists.fedoraproject.org

oracle.com