CVE-2016-10403

Insufficient data validation on image data in PDFium in Google Chrome prior to 51.0.2704.63 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file...

CVE-2018-6120

An integer overflow that could lead to an attacker-controlled heap out-of-bounds write in PDFium in Google Chrome prior to 66.0.3359.170 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file...

Design/Logic Flaw

Handling of URI action in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to initiate potentially unsafe navigations without a user gesture via a crafted PDF file...

CVE-2018-6144

Off-by-one error in PDFium in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file...

Design/Logic Flaw

Off-by-one error in PDFium in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file...

CVE-2018-6170

A bad cast in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

Design/Logic Flaw

A bad cast in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

UBUNTU-CVE-2018-20065

Handling of URI action in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to initiate potentially unsafe navigations without a user gesture via a crafted PDF file...

UBUNTU-CVE-2018-17461

An out of bounds read in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file...

UBUNTU-CVE-2018-16076

Missing bounds check in PDFium in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file...

CVE-2016-10403

Removed by vendor...

CVE-2018-16076

Missing bounds check in PDFium in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file...

CVE-2018-20065

CVE-2018-20065 affects Google Chrome prior to 71.0.3578.80 via the PDFium component. The vulnerability arises from how Chrome handles URI actions in PDFs, allowing a remote attacker to trigger potentially unsafe navigations without user gesture through a crafted PDF file. Connected sources specif...

CVE-2018-16076

CVE-2018-16076 affects the PDFium component used by Google Chrome/Chromium. The issue is a missing bounds check in PDFium that enables a remote attacker to trigger an out-of-bounds memory read through a crafted PDF file. Debian notes a fix in chromium-browser 69.0.3497.81 (and related updates), i...

CVE-2018-6170

Removed by vendor...

CVE-2018-17461

Removed by vendor...

CVE-2018-6144

Off-by-one error in PDFium in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file...

CVE-2018-6144

CVE-2018-6144 affects Google Chrome via the PDFium library, where an out-of-bounds memory access could be triggered by a crafted PDF. The vulnerability is in PDFium used by Chrome prior to version 67.0.3396.62 and could enable remote code execution or memory corruption. Public advisories and Debi...

CVE-2018-6170

A bad cast in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

CVE-2018-6170

CVE-2018-6170 refers to a type confusion/bad cast in PDFium used by Google Chrome, affecting versions prior to 68.0.3440.75. The vulnerability enables a crafted PDF to trigger heap corruption, with CVSS3 base score 8.8 (HIGH) and CVSS2 6.8 (MEDIUM). Affected product: Google Chrome (PDFium compone...