Log in Start free

Vulnerability · Published Sep 9, 2022 · Assigned by mitre

CVE-2021-37819

High 7.5

In plain English

A high-severity security flaw in the libitext-java package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 58% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)7.5High
Exploit odds (30 days)0.9%top 41.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

PDF Labs pdftk-java v3.2.3 was discovered to contain an infinite loop via the component /text/pdf/PdfReader.java.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12libitext-javano fix listedDEBIAN-CVE-2021-37819
Debian:13libitext-java2.1.7-16DEBIAN-CVE-2021-37819
Debian:14libitext-java2.1.7-16DEBIAN-CVE-2021-37819
Debian:12libitext1-javano fix listedDEBIAN-CVE-2021-37819
Debian:12libitext5-javano fix listedDEBIAN-CVE-2021-37819
Debian:13libitext5-java5.5.13.3-4DEBIAN-CVE-2021-37819
Debian:14libitext5-java5.5.13.3-4DEBIAN-CVE-2021-37819
Debian:12pdftk2.02-5DEBIAN-CVE-2021-37819
Debian:12pdftk-java3.3.2-1DEBIAN-CVE-2021-37819
Debian:13pdftk-java3.3.2-1DEBIAN-CVE-2021-37819
Debian:14pdftk-java3.3.2-1DEBIAN-CVE-2021-37819
Ubuntu:22.04:LTSlibitext-javano fix listedUBUNTU-CVE-2021-37819
Ubuntu:24.04:LTSlibitext-javano fix listedUBUNTU-CVE-2021-37819
Ubuntu:25.10libitext-javano fix listedUBUNTU-CVE-2021-37819
Ubuntu:26.04:LTSlibitext-javano fix listedUBUNTU-CVE-2021-37819
Ubuntu:26.10libitext-javano fix listedUBUNTU-CVE-2021-37819
Ubuntu:22.04:LTSlibitext5-javano fix listedUBUNTU-CVE-2021-37819
Ubuntu:24.04:LTSlibitext5-javano fix listedUBUNTU-CVE-2021-37819
Ubuntu:25.10libitext5-javano fix listedUBUNTU-CVE-2021-37819
Ubuntu:26.04:LTSlibitext5-javano fix listedUBUNTU-CVE-2021-37819
Ubuntu:26.10libitext5-javano fix listedUBUNTU-CVE-2021-37819
Ubuntu:22.04:LTSpdftk-javano fix listedUBUNTU-CVE-2021-37819

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

References