~ / search / GHSA-7grw-6pjh-jpc9

GHSA-7grw-6pjh-jpc9

Infinite Loop in Apache PDFBox

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-31812

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.pdfbox:pdfbox >= 2.0.0, < 2.0.24 2.0.24
Maven org.apache.pdfbox:pdfbox-parent >= 2.0.0, < 2.0.24 2.0.24

Details

As written in the advisory (Markdown source, shown as plain text).

In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

References

External links from the advisory. They lead to third-party sites.