The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files.
CPE | Name | Operator | Version |
---|---|---|---|
tika | lt | 1.28.2 | |
tika | ge | 2.0.0 | |
tika | lt | 2.4.0 | |
primavera_unifier | eq | 18.8 | |
primavera_unifier | ge | 17.7 | |
primavera_unifier | le | 17.12 | |
primavera_unifier | eq | 19.12 | |
primavera_unifier | eq | 20.12 | |
primavera_unifier | eq | 21.12 |