Skip to content
OpenAdvisories
Unscored CVE-2016-10403 EUVD-2016-1585GHSA-8973-9xqm-82q8

Insufficient data validation on image data in PDFium in Google Chrome prior to 51.0.2704.63 allowed a remote attacker to perform an out of …

Published Jan 9, 2019 · Updated Aug 6, 2024 · Assigned by Chrome

Vendor: Google Product: Chrome Category: Browsers

Description

Insufficient data validation on image data in PDFium in Google Chrome prior to 51.0.2704.63 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.

Affected products

VendorProductAffectedFixed
Google Chrome unspecified – < 51.0.2704.63 51.0.2704.63

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 8 chromium-browser 51.0.2704.63-1~deb8u1 DSA-3590-1

Advisories 1

References