Lucene search
Veracode Vulnerability DatabaseVERACODE:33986HistoryFeb 03, 2022 - 8:11 a.m.
Denial Of Service (DoS)
2022-02-0308:11:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.002 Low
EPSS
Percentile
61.3%
itext7-core is vulnerable to denial of service. The vulnerability exists in the writeFloats component in OutputStream.java file which allows an attacker to crash the system using stack-based buffer overflow via a crafted PDF file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| itext 7 - io | le | 7.2.0 | |
| itext 7 - io | le | 7.2.0 |
Related
osv
osv
CVE-2022-24197
2022-02-01 20:15:11
Out-of-bounds Write in iText
2022-02-02 00:01:45
github
github
Out-of-bounds Write in iText
2022-02-02 00:01:45
prion
prion
Stack overflow
2022-02-01 20:15:00
ibm
ibm
nvd
nvd
CVE-2022-24197
2022-02-01 20:15:11
cvelist
cvelist
CVE-2022-24197
2022-02-01 00:00:00
cve
cve
CVE-2022-24197
2022-02-01 20:15:11