itextpdf itext

Name: itextpdf itext
Brand: itextpdf

productUS

cpe:2.3:a:itextpdf:itext:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical1high5medium0low

updated 2026-10-28

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-9096US	high8.8	9.56% (95th)	Exploit	5.5.12	2017-11-08	4 versions
CVE-2021-43113US	critical9.8	5.42% (93rd)	—	7.1.17	2021-12-15	7.0.0 → 7.1.17
CVE-2022-24196US	medium6.5	1.39% (72nd)	—	7.2.2	2022-02-01	< 7.2.2
CVE-2022-24197US	medium6.5	1.29% (70th)	—	7.2.2	2022-02-01	< 7.2.2
CVE-2023-6298US	medium6.5	1.11% (66th)	—	no fix	2023-11-26	= 8.0.2
CVE-2023-6299US	medium6.5	0.94% (61st)	—	no fix	2023-11-26	= 8.0.1
CVE-2022-24198US	medium6.5	0.55% (46th)	—	no fix	2022-02-01	= 7.1.17

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read1 CVEs
CWE-129Improper Validation of Array Index1 CVEs
CWE-401Missing Release of Memory after Effective Lifetime1 CVEs
CWE-611Improper Restriction of XML External Entity Reference1 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')1 CVEs
CWE-770Allocation of Resources Without Limits or Throttling1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.