CVE-2021-31811

In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

View graph Watch Export

CVSS v3.1

5.5 MEDIUM

EPSS

3.45%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

CVSS v3.1 Detail

Attack VectorLOCAL

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

ScopeUNCHANGED

ConfidentialityNONE

IntegrityNONE

AvailabilityHIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Connections

13 relationships

fedora

source

flexcube universal banking

source

primavera unifier

source

outside in technology

source

pdfbox

source

retail customer management and segmentation foundation

source

banking corporate lending process management

source

banking credit facilities process management

source

banking supply chain finance

source

communications messaging server

source

banking treasury management

source

banking trade finance

source

Timeline

disclosure → media coverage

Jun 12, 2021

Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024