Itextpdf Itext
7 CVEs affecting Itextpdf Itext. Latest disclosed: 2023-11-26. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-43113 | Critical | 9.8 | 2021-12-15 | iTextPDF in iText 7 and up to (excluding 4.4.13.3) 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs (aka Ghostscript) co… |
CVE-2017-9096 | High | 8.8 | 2017-11-08 | The XML parsers in iText before 5.5.12 and 7.x before 7.0.3 do not disable external entities, which might allow remote attackers to conduct XML external entity… |
CVE-2022-24198 | Medium | 6.5 | 2022-02-01 | iText v7.1.17 was discovered to contain an out-of-bounds exception via the component ARCFOUREncryption.encryptARCFOUR, which allows attackers to cause a Denial… |
CVE-2022-24197 | Medium | 6.5 | 2022-02-01 | iText v7.1.17 was discovered to contain a stack-based buffer overflow via the component ByteBuffer.append, which allows attackers to cause a Denial of Service… |
CVE-2022-24196 | Medium | 6.5 | 2022-02-01 | iText v7.1.17, up to (exluding)": 7.1.18 and 7.2.2 was discovered to contain an out-of-memory error via the component readStreamBytesRaw, which allows attacker… |
CVE-2023-6299 | Medium | 4.3 | 2023-11-26 | A vulnerability, which was classified as problematic, has been found in Apryse iText 8.0.1. This issue affects some unknown processing of the file PdfDocument… |
CVE-2023-6298 | Medium | 4.3 | 2023-11-26 | A vulnerability classified as problematic was found in Apryse iText 8.0.2. This vulnerability affects the function main of the file PdfDocument.java. The manip… |