Known vulnerabilities in PDFBox

Software: PDFBox
Software CPE: cpe:2.3:a:apache_foundation:pdfbox:*:*:*:*:*:*:*:*
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PDFBox PDFBox is affected by 8 known vulnerabilities: 5 medium, 3 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU54080 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-31812
CWE-835 Medium
No
No
2.0.24 13.06.2021 SB2021061308
SB2021100412
SB2022020119
and 17 more
#VU54079 - Resource exhaustion
CVE-2021-31811
CWE-400 Medium
No
No
2.0.24 13.06.2021 SB2021061308
SB2021100412
SB2022081905
and 7 more
#VU51606 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-27807
CWE-835 Medium
No
No
2.0.23 22.03.2021 SB2021032216
SB2021072779
SB2022090818
and 7 more
#VU51605 - Resource exhaustion
CVE-2021-27906
CWE-400 Medium
No
No
2.0.23 22.03.2021 SB2021032216
SB2021072142
SB2021072738
and 7 more
#VU28194 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-0228
CWE-611 Medium
No
No
2.0.15 24.05.2020 SB2019041716
SB2021042320
SB2021042642
and 4 more
#VU15176 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-11797
CWE-835 Low
No
No
1.8.16, 2.0.12 08.10.2018 SB2018100901
SB2018102421
SB2018111707
and 5 more
#VU13547 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-8036
CWE-835 Low
No
No
1.8.15, 2.0.10 03.07.2018 SB2018070304
SB2018090711
SB2018102421
and 7 more
#VU40255 - Improper input validation
CVE-2016-2175
CWE-20 Low
No
No
- 01.06.2016 SB2016060107
SB2023090611
SB2016070513
and 1 more