EUVD-2021-1279

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Infinite loop issue in Apache PDFBox caused by crafted PDF affects versions 2.0.23 and earlier

Reporter	Title	Published	Views	Family All 62
IBM Security Bulletins	Security Bulletin: Watson Explorer is affected by Apache PDFBox vulnerabilities (CVE-2021-27807, CVE-2021-27906, CVE-2021-31811, CVE-2021-31812)	19 Jul 202109:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Apache PDFBox security vulnerabilities	15 Nov 202121:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Risk Manager on CP4S is affected by multiple vulnerabilities	18 Oct 202114:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache PDFBox	1 Oct 202106:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Compare and Comply for IBM Cloud Pak for Data affected by vulnerability in Apache PDFBox	28 Oct 202120:51	–	ibm
IBM Security Bulletins	Security Bulletin: [All] Apache PDFBox (Publicly disclosed vulnerability)	30 Sep 202101:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities with IBM FileNet Content Manager component in IBM Business Automation Workflow -CVE-2021-31811, CVE-2021-31812, CVE-2021-23926, CVE-2021-38965	18 Feb 202219:58	–	ibm
IBM Security Bulletins	Security Bulletin: Apache PDFBox Vulnerabilities Affect IBM Control Center (CVE-2021-31811, CVE-2021-31812)	13 Oct 202122:27	–	ibm
IBM Security Bulletins	Security Bulletin: Apache PDFBox as used by IBM QRadar SIEM is vulnerable to denial of service (DOS) (CVE-2021-31811, CVE-2021-31812)	3 Dec 202118:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including a remote code execution in Spring Framework (CVE-2022-22965)	11 Apr 202215:17	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "fb45d7f0-d74b-3daf-8ab9-5ecf54af3901",
        "vendor": {
          "name": "Apache Software Foundation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "a0aec55f-73de-37bc-8f62-afec29f3f190",
        "product": {
          "name": "Apache PDFBox"
        },
        "product_version": "Apache PDFBox <2.0.24"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-31812
oracle	www.oracle.com/security-alerts/cpuoct2021.html
oracle	www.oracle.com/security-alerts/cpujul2022.html
oracle	www.oracle.com/security-alerts/cpujan2022.html
oracle	www.oracle.com/security-alerts/cpuapr2022.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/MDJKJQOMVFDFIDS27OQJXNOYHV2O273D
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/7HHWJRFXZ3PTKLJCOM7WJEYZFKFWMNSV
lists	www.lists.apache.org/thread.html/rfe26bcaba564deb505c32711ba68df7ec589797dcd96ff3389a8aaba@%3Cnotifications.ofbiz.apache.org%3E
lists	www.lists.apache.org/thread.html/rf251f6c358087107f8c23473468b279d59d50a75db6b4768165c78d3@%3Cannounce.apache.org%3E
lists	www.lists.apache.org/thread.html/re0cacd3fb337cdf8469853913ed2b4ddd8f8bfc52ff0ddbe61c1dfba@%3Ccommits.ofbiz.apache.org%3E

07 Oct 2025 00:30Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.15.5

CVSS 24.3

EPSS0.00231