CVE-2019-5860

CVE-2019-5860 is a use-after-free in the PDFium component of Chromium/Google Chrome prior to 76.0.3809.87. The vulnerability can potentially lead to heap corruption and remote code execution via a crafted PDF file. Multiple connected advisories confirm the affected component (PDFium) and the vers...

CVE-2019-5868

Use after free in PDFium in Google Chrome prior to 76.0.3809.100 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2019-5860

Use after free in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2019-5854

Integer overflow in PDFium in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2019-5854

CVE-2019-5854 is an integer overflow in the PDFium component of Chromium/Google Chrome prior to 76.0.3809.87, leading to potential heap corruption when processing crafted PDFs. Multiple connected sources (Debian security advisories, Arch Linux ASA, CVE listings) confirm PDFium’s role and the affe...

CVE-2019-13706

Out of bounds memory access in PDFium in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2019-13706

Out of bounds memory access in PDFium in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2019-13679

CVE-2019-13679 is a PDFium-related issue in Google Chrome/Chromium where insufficient policy enforcement allowed a crafted PDF to trigger print dialogs without user activation. Connected advisories (Fedora/Debian/Nessus) confirm the vulnerability and show remediation through upgrading Chromium/Ch...

CVE-2019-13679

Insufficient policy enforcement in PDFium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to show print dialogs via a crafted PDF file...

chromium-browser: Out-of-bounds read in PDFium

Out of bounds memory access in PDFium in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

Google Chrome PDFium Buffer Overflow Vulnerability (CNVD-2019-38249)

Google Chrome is the United States Google Google company's a Web browser. PDFium is one of the open source PDF rendering engine. A buffer error vulnerability exists in the PDFium component of Google Chrome versions prior to 78.0.3904.70. A remote attacker can exploit this vulnerability by reading...

CVE-2019-13706

Out of bounds memory access in PDFium in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2019-13679

Insufficient policy enforcement in PDFium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to show print dialogs via a crafted PDF file...

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers is related to a corruption that occurs during integer overflow. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service...

The vulnerability of the PDFium PDF-content processor in Google Chrome browser allows a hacker to trigger a service failure.

The vulnerability of the PDFium PDF-content processor in Google Chrome browser is related to an error that causes previously freed memory to be reclaimed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through the use of a specially created PDF file...

CVE-2019-5795

Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file...

CVE-2017-5034

A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file...

CVE-2019-5047

An exploitable Use After Free vulnerability exists in the CharProcs parsing functionality of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a Use After Free. An attacker can craft a malicious PDF to trigger this vulnerability...

Design/Logic Flaw

A specifically crafted PDF file can lead to a heap corruption when opened in NitroPDF 12.12.1.522. With careful memory manipulation, this can lead to arbitrary code execution. In order to trigger this vulnerability, the victim would need to open the malicious file...

Type confusion

An exploitable use-after-free vulnerability exists in the Length parsing function of NitroPDF. A specially crafted PDF can cause a type confusion, resulting in a use-after-free condition. An attacker can craft a malicious PDF to trigger this vulnerability...