CVE-2023-6299

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-6299
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-6299.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-6299
Downstream
Published
2023-11-26T23:00:05Z
Modified
2026-09-10T11:45:20Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVSS Calculator
Summary
Apryse iText Reference Table PdfDocument.java memory leak
Details

A vulnerability, which was classified as problematic, has been found in Apryse iText 8.0.1. This issue affects some unknown processing of the file PdfDocument.java of the component Reference Table Handler. The manipulation leads to memory leak. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 8.0.2 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-246125 was assigned to this vulnerability. NOTE: The vendor was contacted early about this vulnerability. The fix was introduced in the iText 8.0.2 release on October 25th 2023, prior to the disclosure.

Database specific 
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-401"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/6xxx/CVE-2023-6299.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "8.0.1"
                },
                {
                    "last_affected": "8.0.1"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/itext/itext-java

Affected ranges

Type
GIT
Repo
https://github.com/itext/itext-java
Events
Introduced
05310a436f5b5c4c9be5cc89d7f92ab17805dead
Last Affected
05310a436f5b5c4c9be5cc89d7f92ab17805dead
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:itextpdf:itext:8.0.1:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "8.0.1"
        },
        {
            "last_affected": "8.0.1"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

8.*
8.0.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-6299.json"