In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.apache.pdfbox:pdfbox(Maven) | 1.8.0 | 1.8.15 | N/A |
| org.apache.pdfbox:pdfbox(Maven) | 2.0.0RC1 | 2.0.11 | N/A |
CVSS Metrics
