CVE-2018-8036

CVE-2018-8036 affects Apache PDFBox (versions 1.8.0–1.8.14 and 2.0.0RC1–2.0.10). A carefully crafted file can trigger an infinite loop in PDFBox’s AFMParser, causing memory exhaustion (DoS). Public details in connected IBM/IBM-Log-Analysis-related advisories confirm the issue and link to fixes, e...