CVE-2021-31811: Apache Pdfbox

Medium severity, CVSS 5.5. EPSS: 3.6% chance of exploitation in the next 30 days.

In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

Affected products

• Apache Pdfbox: from 2.0.0, up to and including 2.0.23
• Fedoraproject Fedora: version 33 only; version 34 only
• Oracle Banking Corporate Lending Process Management: version 14.2.0 only; version 14.3.0 only; version 14.5.0 only
• Oracle Banking Credit Facilities Process Management: version 14.2.0 only; version 14.3.0 only; version 14.5.0 only
• Oracle Banking Supply Chain Finance: version 14.2.0 only; version 14.3.0 only; version 14.5.0 only
• Oracle Banking Trade Finance: version 14.5 only
• Oracle Banking Treasury Management: version 14.5 only
• Oracle Communications Messaging Server: version 8.1 only
• Oracle Flexcube Universal Banking: from 14.0.0, up to and including 14.3.0; version 14.5 only
• Oracle Outside In Technology: version 8.5.5 only
• Oracle Primavera Unifier: from 17.7, up to and including 17.12; version 18.8 only; version 19.12 only; version 20.12 only
• Oracle Retail Customer Management And Segmentation Foundation: version 18.1 only

Published 2021-06-12. Last modified 2026-06-17.