Submit #238818: itext7 8.0.2 Array Index Out Of Boundsinfo

Titleitext7 8.0.2 Array Index Out Of Bounds
DescriptionException in thread "main" java.lang.ArrayIndexOutOfBoundsException: Index 32 out of bounds for length 32 # Crash stack: The crash thread's stack is as follows: ``` at com.itextpdf.kernel.pdf.PdfXrefTable.initFreeReferencesList(PdfXrefTable.java:439) at com.itextpdf.kernel.pdf.PdfDocument.open(PdfDocument.java:2077) at com.itextpdf.kernel.pdf.PdfDocument.<init>(PdfDocument.java:211) at com.itextpdf.kernel.pdf.PdfDocument.<init>(PdfDocument.java:193) at com.example.PdfFuzzer.myFuzzTest(PdfFuzzer.java:34) ``` # Steps to reproduce: 1. Build the following java code with the corresponding itextpdf library (version 8.0.2). ``` ## Download poc and reproduce files from https://drive.google.com/drive/folders/1OBAeGH_rNfa1os6g6QlIt4pL-2NKHZm_?usp=sharing cd itext7_env_reproduce bash build.sh ``` 2. Run the built program to see the crash by feeding the poc file ``` java -jar target/Entry-1.0-SNAPSHOT-jar-with-dependencies.jar /poc/crash-e9288bfcb681423bf24e93919bbc14deddccb88f ```
Source⚠️ https://drive.google.com/drive/folders/1OBAeGH_rNfa1os6g6QlIt4pL-2NKHZm_?usp=sharing
User
 Anonymous User
Submission11/15/2023 10:35 (3 years ago)
Moderation11/26/2023 08:27 (11 days later)
StatusAccepted
VulDB entry246124 [Apryse iText 8.0.2 PdfDocument.java main array index]
Points20

Do you know our Splunk app?

Download it now for free!