CVE-2022-24198
1 advisory.
Maven/com.itextpdf:itext7-core CVE-2022-24198: medium 6.5, EPSS 0.55%
Out-of-bounds Read in iText
Action: Upgrade com.itextpdf:itext7-core to 7.2.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.2.0 | - |
Fixed versions
| 7.2.0 |
Sources
- osv: GHSA-8c9h-4q7g-fp7h
- https://nvd.nist.gov/vuln/detail/CVE-2022-24198
- https://github.com/itext/itext7/pull/78
- https://github.com/itext/itext7/pull/78#issuecomment-1089287808
- https://github.com/itext/itext7
CVE-2022-24198 · published · modified · JSON