This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2021-27906 →
DEBIAN-CVE-2021-27906
A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2....
Original description
The description as published by the source.
A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
libpdfbox2-java
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.23-1"}]}]
Debian:13
libpdfbox2-java
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.23-1"}]}]
Debian:14
libpdfbox2-java
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.23-1"}]}]
References
- advisory security-tracker.debian.org