CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HCVE-2021-31811
Medium (5.5). EPSS 3.6% chance of exploitation in the next 30 days. Fixed in org.apache.pdfbox:pdfbox 2.0.24.
In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.
Severity
- EPSS
- 3.6% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-770, CWE-789
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:pdfbox
- fedoraproject:fedora
- oracle:banking_corporate_lending_process_management
- oracle:banking_credit_facilities_process_management
- oracle:banking_supply_chain_finance
- oracle:banking_trade_finance
- oracle:banking_treasury_management
- oracle:communications_messaging_server
- oracle:flexcube_universal_banking
- oracle:outside_in_technology
- oracle:primavera_unifier
- oracle:retail_customer_management_and_segmentation_foundation
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-fg3j-q579-v8x4 | Maven | org.apache.pdfbox:pdfbox | >=2.0.0 <2.0.24 | 2.0.24 |
| GHSA-fg3j-q579-v8x4 | Maven | org.apache.pdfbox:pdfbox-parent | >=2.0.0 <2.0.24 | 2.0.24 |
References
- http://www.openwall.com/lists/oss-security/2021/06/12/2
- https://lists.apache.org/thread.html/r132e9dbbe0ebdc08b39583d8be0a575fdba573d60a42d940228bceff%40%3Cnotifications.ofbiz.apache.org%3E
- https://lists.apache.org/thread.html/r143fd8445e0e778f4a85187bd79438630b96b8040e9401751fdb8aea%40%3Ccommits.ofbiz.apache.org%3E
- https://lists.apache.org/thread.html/r179cc3b6822c167702ab35fe36093d5da4c99af44238c8a754c6860f%40%3Ccommits.ofbiz.apache.org%3E
- https://lists.apache.org/thread.html/r2090789e4dcc2c87aacbd87d5f18e2d64dcb9f6eb7c47f5cf7d293cb%40%3Cnotifications.ofbiz.apache.org%3E