Pdfbox (Apache) - vulnerabilities (CVEs)

9 CVEs, 0 in the last 30 days, 82 known versions, newest CVE from 2026-04-14. Vendor: Apache.

CVEs of Pdfbox

• CVE-2026-33929 - CVSS 4.3 (medium), 2026-04-14: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples. This issue affects the…
• CVE-2021-31811 - CVSS 5.5 (medium), 2021-06-12: In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23…
• CVE-2021-31812 - CVSS 5.5 (medium), 2021-06-12: In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior…
• CVE-2021-27906 - CVSS 5.5 (medium), 2021-03-19: A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x…
• CVE-2021-27807 - CVSS 5.5 (medium), 2021-03-19: A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.
• CVE-2019-0228 - CVSS 9.8 (critical), 2019-04-17: Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a…
• CVE-2018-11797 - CVSS 5.5 (medium), 2018-10-05: In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page…
• CVE-2018-8036 - CVSS 6.5 (medium), 2018-07-03: In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of memory…
• CVE-2016-2175 - CVSS 7.8 (high), 2016-06-01: Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML…