CVE-2021-27906

MEDIUM5.5EPSS 0.65%

Uncontrolled Memory Allocation in Apache PDFBox

Published: 5/13/2021Modified: 4/28/2026

Description

A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.

Affected packages (2)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1MEDIUM5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References (27)