CVE-2021-28657 PUBLISHED

A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later.

EPSS 0.22% · 44.6th percentile

Risk Scores

EPSS Score
0.22%
44.6th percentile

Affected Products

VendorProductVersions
Ubuntu:24.04:LTStika1.22-2, 0
Ubuntu:Pro:22.04:LTStika0, 1.22-2, 1.22-2ubuntu0.22.04.1~esm1
Ubuntu:25.10tika1.22-2, 0
Ubuntu:Pro:20.04:LTStika0, 1.22-1, 1.22-1ubuntu0.1~esm1
Ubuntu:16.04:LTStika0, 1.5-2, 1.5-3
Ubuntu:18.04:LTStika0, 1.5-5

Timeline

References

Open in Interactive Console →