Skip to main content
← All vulnerabilities
CVE-2021-27906GHSA-6VQP-H455-42MR

A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 2.0.23
None on Exploit-DB, Metasploit or GitHub

Summary

A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Apache Software Foundation Apache PDFBox

    through 2.0.22

  • org.apache.pdfbox:pdfboxMaven

    From 2.0.0 · fixed in 2.0.23

References 21

lists.apache.org

openwall.com

lists.fedoraproject.org

oracle.com