Itextpdf

8 CVEs across 2 Itextpdf products. Browse Itextpdf vulnerabilities, severities, and proof-of-concept exploits.

Itextpdf products with known CVEs

ProductCVEs
Itext7
Rups1
Itextpdf CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-6299Medium4.32023-11-26A vulnerability, which was classified as problematic, has been found in Apryse iText 8.0.1. This issue affects some unknown processing of the file PdfDocument…
CVE-2023-6298Medium4.32023-11-26A vulnerability classified as problematic was found in Apryse iText 8.0.2. This vulnerability affects the function main of the file PdfDocument.java. The manip…
CVE-2017-20151Medium5.52022-12-30A vulnerability classified as problematic was found in iText RUPS. This vulnerability affects unknown code of the file src/main/java/com/itextpdf/rups/model/Xf…
CVE-2022-24198Medium6.52022-02-01iText v7.1.17 was discovered to contain an out-of-bounds exception via the component ARCFOUREncryption.encryptARCFOUR, which allows attackers to cause a Denial…
CVE-2022-24197Medium6.52022-02-01iText v7.1.17 was discovered to contain a stack-based buffer overflow via the component ByteBuffer.append, which allows attackers to cause a Denial of Service…
CVE-2022-24196Medium6.52022-02-01iText v7.1.17, up to (exluding)": 7.1.18 and 7.2.2 was discovered to contain an out-of-memory error via the component readStreamBytesRaw, which allows attacker…
CVE-2021-43113Critical9.82021-12-15iTextPDF in iText 7 and up to (excluding 4.4.13.3) 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs (aka Ghostscript) co…
CVE-2017-9096High8.82017-11-08The XML parsers in iText before 5.5.12 and 7.x before 7.0.3 do not disable external entities, which might allow remote attackers to conduct XML external entity…