google pdfium - vulnerabilities and exploits

(subscribe to this query)

6.5

CVSSv3

Double free vulnerability in the j2k_read_ppm_v3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote malicious users to cause a denial of service (process crash) via a crafted PDF.

Uclouvain Openjpeg Google Pdfium -Debian Debian Linux 8.0

8.8

CVSSv3

A heap use after free in PDFium in Google Chrome before 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android allows a remote malicious user to potentially exploit heap corruption via crafted PDF files.

Google Chrome

1 Article

8.8

CVSSv3

PDFium in Google Chrome before 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled object lifecycles in CFFL_FormFillter::KillFocusForAnnot, which allowed a remote malicious user to potentially exploit heap corruption via crafted PDF files.

Google Chrome

1 Article

8.8

CVSSv3

A use after free in PDFium in Google Chrome before 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote malicious user to potentially exploit heap corruption via a crafted PDF file.

Google Chrome

6.3

CVSSv3

A use after free in PDFium in Google Chrome before 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote malicious user to perform an out of bounds memory read via a crafted PDF file.

Google Chrome

8.8

CVSSv3

Heap buffer overflow during TIFF image parsing in PDFium in Google Chrome before 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote malicious user to potentially exploit heap corruption via a crafted PDF file.

Google Chrome

8.8

CVSSv3

PDFium in Google Chrome before 57.0.2987.98 for Windows could be made to increment off the end of a buffer, which allowed a remote malicious user to potentially exploit heap corruption via a crafted PDF file.

Google Chrome

8.8

CVSSv3

A use after free in PDFium in Google Chrome before 57.0.2987.98 for Linux and Windows allowed a remote malicious user to perform an out of bounds memory read via a crafted PDF file.

Google Chrome

8.8

CVSSv3

Handling of URI action in PDFium in Google Chrome before 71.0.3578.80 allowed a remote malicious user to initiate potentially unsafe navigations without a user gesture via a crafted PDF file.

Google Chrome

8.8

CVSSv3

Insufficient data validation on image data in PDFium in Google Chrome before 51.0.2704.63 allowed a remote malicious user to perform an out of bounds memory read via a crafted PDF file.

Google Chrome

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook