CVE catalog

CVE-2020-1950

tika - security update

[CVE catalog]

Severity
Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
2.99% · Oct 25, 2026

A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiantika111.22-2fixed
Ubuntutika16.041.5-2vulnerable
Ubuntutika16.041.5-3vulnerable
Ubuntutika16.041.5-4vulnerable
Ubuntutika16.041.5-4ubuntu0.1fixed
Ubuntutika18.041.5-5vulnerable
Ubuntutikapro1.22-1vulnerable
Ubuntutikapro1.22-1ubuntu0.1~esm1fixed
Ubuntutikapro1.22-2vulnerable
Ubuntutikapro1.22-2ubuntu0.22.04.1~esm1fixed
Ubuntutika16.041.5-2vulnerable
Ubuntutika16.041.5-3vulnerable
Ubuntutika16.041.5-4vulnerable
Ubuntutika16.041.5-4ubuntu0.1fixed
Debiantika81.5-1vulnerable
Debiantika81.5-1+deb8u1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiantikadeb111.22-2Not reportedDEBIAN-CVE-2020-1950Not reported
Ubuntutikadeb16.041.5-4ubuntu0.1Not reportedUBUNTU-CVE-2020-1950Not reported
Ubuntutikadebpro1.22-1ubuntu0.1~esm1Not reportedUBUNTU-CVE-2020-1950Not reported
Ubuntutikadebpro1.22-2ubuntu0.22.04.1~esm1Not reportedUSN-7529-1Not reported
Ubuntutikadeb16.041.5-4ubuntu0.1Not reportedUSN-4564-1Not reported
Debiantikadeb81.5-1+deb8u1Not reportedDLA-2161-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]