Not rated
CVE-2022-25169 The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on…
Description
The BPG parser in versions of Apache Tika before 1.28.2 and 2.4.0 may allocate an unreasonable amount of memory on carefully crafted files.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Tika 1.28 | earliest → 1.28.1 | No fix stated |
References
- lists.apache.org lists.apache.org
- [oss-security] 20220516 CVE-2022-25169: Apache Tika BPGParser Memory Usage DoS www.openwall.com
- www.oracle.com www.oracle.com
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified
Other CVEs of Apache Tika
The 15 CVEs of Apache Tika →
CVE-2026-66756
Improper Protection of Alternate Path vulnerability in Apache Tika
6.9
Medium
CVE-2026-66755
Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, and…
5.9
Medium
CVE-2022-33879
The initial fixes in CVE-2022-30126 and CVE-2022-30973 for regexes in the StandardsExtractingContentHandler were…
Not rated
CVE-2022-30973
We failed to apply the fix for CVE-2022-30126 to the 1.x branch in the 1.28.2 release
Not rated