CVE-2021-31812: Apache Pdfbox

Medium severity, CVSS 5.5. EPSS: 3.1% chance of exploitation in the next 30 days.

In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

Affected products

• Apache Pdfbox: from 2.0.0, up to and including 2.0.23
• Fedoraproject Fedora: version 33 only; version 34 only
• Oracle Banking Corporate Lending Process Management: version 14.2.0 only; version 14.3.0 only; version 14.5.0 only
• Oracle Banking Credit Facilities Process Management: version 14.2.0 only; version 14.3.0 only; version 14.5.0 only
• Oracle Banking Supply Chain Finance: version 14.2.0 only; version 14.3.0 only; version 14.5.0 only
• Oracle Communications Messaging Server: version 8.1 only
• Oracle Retail Customer Management And Segmentation Foundation: version 18.1 only

Published 2021-06-12. Last modified 2026-06-17.