Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.pdfbox:pdfbox

8 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
8
Registry
Maven Central

Advisories 8

  • A carefully crafted PDF file can trigger an infinite loop while loading the file

    Affected: from 2.0.0, fixed in 2.0.24.

  • A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading a tiny file

    Affected: from 2.0.0, fixed in 2.0.24.

  • A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file

    Affected: from 2.0.0, fixed in 2.0.23.

  • A carefully crafted PDF file can trigger an infinite loop while loading the file

    Affected: from 2.0.0, fixed in 2.0.23.

  • Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity…

    Affected: from 2.0.14, fixed in 2.0.15.

  • In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation…

    Affected: from 1.8.0, fixed in 1.8.16; from 2.0.0, fixed in 2.0.12.

  • In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to…

    Affected: from 1.8.0, fixed in 1.8.15; from 2.0.0RC1, fixed in 2.0.11.

  • Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers to…

    Affected: fixed in 1.8.12; from 2.0.0, fixed in 2.0.1.