VULNERABILITY INTELLIGENCE
CVE-2021-27807
CVSS score5.5 MEDIUM
EPSS probability2.99%
CISA KEVNot currently listed
Published2021-03-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Description
A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.
Weakness classification
- security@apache.org: CWE-834
- nvd@nist.gov: CWE-834
Primary references
- security@apache.org — Mailing List, Vendor Advisory
- security@apache.org
- security@apache.org
- security@apache.org
- security@apache.org
- security@apache.org
- security@apache.org
- security@apache.org
- security@apache.org
- security@apache.org
- security@apache.org — Mailing List, Vendor Advisory
- security@apache.org — Mailing List, Vendor Advisory