CVE-2021-31812

In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

View graph Watch Export

CVSS v3.1

5.5 MEDIUM

EPSS

3.05%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

CVSS v3.1 Detail

Attack VectorLOCAL

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

ScopeUNCHANGED

ConfidentialityNONE

IntegrityNONE

AvailabilityHIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Connections

8 relationships

retail customer management and segmentation foundation

source

banking corporate lending process management

source

banking credit facilities process management

source

banking supply chain finance

source

communications messaging server

source

Timeline

disclosure → media coverage

Jun 12, 2021

Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024