itext7:PdfFuzzer: Security exception in com.itextpdf.kernel.pdf.PdfDictionary.get

Project: https://github.com/itext/itext7.git Detailed Report: https://oss-fuzz.com/testcase?key=4507884179554304 Project: itext7 Fuzzing Engine: libFuzzer Fuzz Target: PdfFuzzer Job Type: libfuzzerasanitext7 Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

CVE-2021-43113

The CVE-2021-43113 case concerns iTextPDF (iText 7 era) where the CompareTool filename handling interacts with Ghostscript, enabling a command injection via GhostscriptHelper.java. Affected products/versions: iTextPDF before 7.1.17 (up to but not including 4.4.13.3); the Debian/libitext5-java adv...