CVE-2021-37819
HIGHpdftk-java 3.2.3 - Denial of Service via Infinite Loop in PdfReader
Title source: llmDescription
PDF Labs pdftk-java v3.2.3 was discovered to contain an infinite loop via the component /text/pdf/PdfReader.java.
References (1)
Core 1
Core References
Patch, Third Party Advisory x_refsource_misc
https://gitlab.com/pdftk-java/pdftk/-/merge_requests/21/diffs?commit_id=9b0cbb76c8434a8505f02ada02a94263dcae9247#diff-content-b3cfd29983c793bcae2375502abd5baa8f5d1081
Scores
CVSS v3
7.5
EPSS
0.0069
EPSS Percentile
47.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-835
Status
published
Products (1)
pdftk-java_project/pdftk-java
3.2.3
Published
Sep 09, 2022
Tracked Since
Feb 18, 2026