~ / search / GHSA-fg3j-q579-v8x4

GHSA-fg3j-q579-v8x4

Uncontrolled memory consumption

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-31811

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.pdfbox:pdfbox >= 2.0.0, < 2.0.24 2.0.24
Maven org.apache.pdfbox:pdfbox-parent >= 2.0.0, < 2.0.24 2.0.24

Details

As written in the advisory (Markdown source, shown as plain text).

In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

References

External links from the advisory. They lead to third-party sites.