CVE-2016-6809

Critical

Published: 06/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization.

Risk Assessment

Executing malicious Java code could lead to system compromise, posing a serious security threat to the organization.

Recommendation

It is recommended to upgrade Apache Tika to version 1.14 or later to mitigate this vulnerability.

Original NVD description (English source)

Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization.