VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Mar 19, 2021· Updated Jun 17, 2026

CVE-2021-27906

CVE-2021-27906

Description

A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.apache.pdfbox:pdfboxMaven
>= 2.0.0, < 2.0.232.0.23

Affected products

44
  • Apache/Pdfbox
    cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:*
    Range: >=2.0.0,<=2.0.22
  • Oracle Corporation/Banking Corporate Lending Process Management3 versions
    cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.2.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.5.0:*:*:*:*:*:*:*
  • Oracle Corporation/Banking Credit Facilities Process Management3 versions
    cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.2.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.5.0:*:*:*:*:*:*:*
  • Oracle Corporation/Banking Supply Chain Finance3 versions
    cpe:2.3:a:oracle:banking_supply_chain_finance:14.2.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:oracle:banking_supply_chain_finance:14.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:banking_supply_chain_finance:14.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:banking_supply_chain_finance:14.5.0:*:*:*:*:*:*:*
  • Oracle Corporation/Banking Trade Finance Process Management3 versions
    cpe:2.3:a:oracle:banking_trade_finance_process_management:14.2.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:oracle:banking_trade_finance_process_management:14.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:banking_trade_finance_process_management:14.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:banking_trade_finance_process_management:14.5.0:*:*:*:*:*:*:*
  • Oracle Corporation/Banking Treasury Management
    cpe:2.3:a:oracle:banking_treasury_management:14.5:*:*:*:*:*:*:*
  • Oracle Corporation/Banking Virtual Account Management3 versions
    cpe:2.3:a:oracle:banking_virtual_account_management:14.2.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:oracle:banking_virtual_account_management:14.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:banking_virtual_account_management:14.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:banking_virtual_account_management:14.5.0:*:*:*:*:*:*:*
  • Oracle Corporation/Communications Session Report Manager
    cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:*
    Range: >=8.0.0,<=8.2.4.0
  • Oracle Corporation/Flexcube Universal Banking2 versions
    cpe:2.3:a:oracle:flexcube_universal_banking:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:flexcube_universal_banking:*:*:*:*:*:*:*:*range: >=14.0.0,<=14.3.0
    • cpe:2.3:a:oracle:flexcube_universal_banking:14.5.0:*:*:*:*:*:*:*
  • Oracle Corporation/Hyperion Financial Reporting2 versions
    cpe:2.3:a:oracle:hyperion_financial_reporting:11.1.2.4:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:hyperion_financial_reporting:11.1.2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:hyperion_financial_reporting:11.2.6.0:*:*:*:*:*:*:*
  • Oracle Corporation/Hyperion Infrastructure Technology
    cpe:2.3:a:oracle:hyperion_infrastructure_technology:*:*:*:*:*:*:*:*
    Range: <11.2.8.0
  • Oracle Corporation/Outside In Technology
    cpe:2.3:a:oracle:outside_in_technology:8.5.5:*:*:*:*:*:*:*
  • Oracle Corporation/Peoplesoft Enterprise Peopletools2 versions
    cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*
  • Oracle Corporation/Primavera Unifier4 versions
    cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*range: >=17.7,<=17.12
    • cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:*
  • Oracle Corporation/Retail Customer Management And Segmentation Foundation
    cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0:*:*:*:*:*:*:*
  • Oracle Corporation/Retail Xstore Point Of Service5 versions
    cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:retail_xstore_point_of_service:20.0.1:*:*:*:*:*:*:*
  • Oracle Corporation/Webcenter Sites2 versions
    cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0:*:*:*:*:*:*:*
  • Fedoraproject/Fedora3 versions
    cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
  • Oracle Corporation/Communications Messaging Server
    cpe:2.3:o:oracle:communications_messaging_server:8.1:*:*:*:*:*:*:*
  • ghsa-coords
    pkg:maven/org.apache.pdfbox/pdfbox
    Range: >= 2.0.0, < 2.0.23
  • Apache Software Foundation/Apache PDFBoxv5
    Range: Apache PDFBox

Patches

Vulnerability mechanics

References

42

News mentions

0

No linked articles in our index yet.