CVE-2018-17197: Apache Tika

Medium severity, CVSS 6.5. EPSS: 6.1% chance of exploitation in the next 30 days.

A carefully crafted or corrupt sqlite file can cause an infinite loop in Apache Tika's SQLite3Parser in versions 1.8-1.19.1 of Apache Tika.

Affected products

• Apache Tika: from 1.8, up to and including 1.19.1

Published 2018-12-24. Last modified 2026-06-17.