Approved changes feed: RSS · Atom

cpe:2.3:a:itextpdf:itext:8.0.1:*:*:*:*:*:*:*

part: a version: 8.0.1 update: *

VendorItextpdf (6d5120da-c999-5e57-b3ef-b2b8bd75f668)
ProductItext (74fb4263-e315-51dc-966f-391806fee6ad)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libitext1-java purl2cpe 2026-06-01 10:14:23.033456
pkg:deb/debian/libitext5-java purl2cpe 2026-06-01 10:14:23.033457
pkg:deb/ubuntu/libitext1-java purl2cpe 2026-06-01 10:14:23.033459
pkg:deb/ubuntu/libitext5-java purl2cpe 2026-06-01 10:14:23.033460
pkg:github/itext/itext7 purl2cpe 2026-06-01 10:14:23.033462
pkg:maven/com.itextpdf/itextpdf purl2cpe 2026-06-01 10:14:23.033463
pkg:nuget/itext7 purl2cpe 2026-06-01 10:14:23.033464
pkg:rpm/opensuse/itextpdf purl2cpe 2026-06-01 10:14:23.033466
pkg:sourceforge/itext purl2cpe 2026-06-01 10:14:23.033467

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6299 vulnerable 2026-06-08 06:19:46.887470 Apryse iText Reference Table PdfDocument.java memory leak
MEDIUM (4.3)
A vulnerability, which was classified as problematic, has been found in Apryse iText 8.0.1. This issue affects some unknown processing of the file PdfDocument.java of the component Reference Table Handler. The manipulation leads to memory leak. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 8.0.2 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-246125 was assigned to this vulnerability. NOTE: The vendor was contacted early about this vulnerability. The fix was introduced in the iText 8.0.2 release on October 25th 2023, prior to the disclosure.
Published: 2023-11-26T23:00:05.998Z
Updated: 2024-08-02T08:28:21.473Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.