← Back to browse · API

CVE-2021-43113

Severity
CRITICAL
CVSS
9.8
EPSS
0.05172
Risk score
41.01
CISA KEV
No
PoC
No
Published
2021-12-15
Modified
2026-02-25
First seen
2026-08-07
Aliases
EUVD-2021-2524, GHSA-GV87-Q66H-4277
Products
n/a:n/a n/a
Sources
euvd EUVD-2021-2524

Description

iTextPDF in iText 7 and up to (excluding 4.4.13.3) 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs (aka Ghostscript) command line in GhostscriptHelper.java.

References