CVE-2021-28657CWE-835

Infinite loop in Apache Tika's MP3 parser

published March 31, 2021

CVSS
—
EPSS
3%
Percentile
86.0
In the wild
Unconfirmed
What it is

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02739 · 86.0th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2021-03-31T07:35Z
EPSS history
Timeline
  • 31 MAR 07:35Z
    Infinite loop in Apache Tika's MP3 parser
    cvelistv5