CVE-2021-27807

—

CVSS 3.1

5.5 medium

EPSS

3%p86

Published

Mar 19, 2021 (Mar 19, 2021)

Modified

Jun 17, 2026

Description

A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.

Vendors: apache fedoraproject oracle
Products: pdfbox, fedora, banking trade finance process management, banking treasury management, banking virtual account management, communications session report manager, flexcube universal banking, hyperion financial reporting, hyperion infrastructure technology, outside in technology, primavera unifier, retail customer management and segmentation foundation
Weakness: CWE-834
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (3.0%)

In the news0 stories

No ingested article mentions this CVE yet.