VulnerableCode Package Details - pkg:maven/org.apache.pdfbox/pdfbox@1.8.12

Search for packages

Vulnerability	Summary	Fixed by
VCID-qu7g-tuf1-87ab Aliases: CVE-2018-11797 GHSA-gx96-vgf7-hwfg	Improper Input Validation In Apache PDFBox, a carefully crafted PDF file can trigger an extremely long-running computation when parsing the page tree.	1.8.16 Affected by 0 other vulnerabilities. 2.0.12 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-x3mz-kw7r-9bcg Aliases: CVE-2018-8036 GHSA-j2xq-pfff-mvgg	Loop with Unreachable Exit Condition (Infinite Loop) In Apache PDFBox, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of memory exception in the `AFMParser`.	1.8.15 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 2.0.11 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-qu7g-tuf1-87ab
Aliases:
CVE-2018-11797
GHSA-gx96-vgf7-hwfg

Improper Input Validation In Apache PDFBox, a carefully crafted PDF file can trigger an extremely long-running computation when parsing the page tree.

1.8.16
Affected by 0 other vulnerabilities.

2.0.12
Affected by 2 other vulnerabilities.

VCID-x3mz-kw7r-9bcg
Aliases:
CVE-2018-8036
GHSA-j2xq-pfff-mvgg

Loop with Unreachable Exit Condition (Infinite Loop) In Apache PDFBox, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of memory exception in the `AFMParser`.

1.8.15
Affected by 1 other vulnerability.

2.0.11
Affected by 3 other vulnerabilities.

Vulnerability	Summary	Aliases
VCID-jac2-1kyc-zuhh	Improper Restriction of XML External Entity Reference Apache PDFBox does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted PDF.	CVE-2016-2175 GHSA-4c32-xmgj-2g98

Vulnerability

Summary

Aliases

VCID-jac2-1kyc-zuhh

Improper Restriction of XML External Entity Reference Apache PDFBox does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted PDF.

CVE-2016-2175
GHSA-4c32-xmgj-2g98

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-04T20:14:56.653249+00:00	GitLab Importer	Affected by	VCID-qu7g-tuf1-87ab	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.pdfbox/pdfbox/CVE-2018-11797.yml	38.6.0
2026-06-04T20:13:30.306411+00:00	GitLab Importer	Affected by	VCID-x3mz-kw7r-9bcg	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.pdfbox/pdfbox/CVE-2018-8036.yml	38.6.0
2026-06-04T18:23:27.636371+00:00	GHSA Importer	Affected by	VCID-qu7g-tuf1-87ab	https://github.com/advisories/GHSA-gx96-vgf7-hwfg	38.6.0
2026-06-04T18:23:27.371064+00:00	GHSA Importer	Fixing	VCID-jac2-1kyc-zuhh	https://github.com/advisories/GHSA-4c32-xmgj-2g98	38.6.0
2026-06-04T17:38:15.486753+00:00	GithubOSV Importer	Fixing	VCID-jac2-1kyc-zuhh	https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-4c32-xmgj-2g98/GHSA-4c32-xmgj-2g98.json	38.6.0
2026-06-02T04:36:35.511350+00:00	GitLab Importer	Fixing	VCID-jac2-1kyc-zuhh	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.pdfbox/pdfbox/CVE-2016-2175.yml	38.6.0