GHSA-8c9h-4q7g-fp7hMediumCVSS 6.5

Out-of-bounds Read in iText

Published
February 2, 2022
Last Modified
March 7, 2023

🔗 CVE IDs covered (1)

CVE-2022-24198 →

📋 Description

iText v7.1.17 was discovered to contain an out-of-bounds exception via the component ARCFOUREncryption.encryptARCFOUR, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file. NOTE: Vendor does not view this as a vulnerability and has not found it to be exploitable.

🎯 Affected products1

  • maven/com.itextpdf:itext7-core:<= 7.1.17

🔗 References (4)