Not rated
CVE-2016-5183 A heap use after free in PDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for…
Description
A heap use after free in PDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android allows a remote attacker to potentially exploit heap corruption via crafted PDF files.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android | Versions not published |
References
- codereview.chromium.org codereview.chromium.org
- crbug.com crbug.com
- 93528 www.securityfocus.com
- RHSA-2016:2067 rhn.redhat.com
- GLSA-201610-09 security.gentoo.org
- chromereleases.googleblog.com chromereleases.googleblog.com
Timeline
- Published
- Last modified
Other CVEs of Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android
The 9 CVEs of Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android →
CVE-2016-5186
Devtools in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly…
Not rated
CVE-2016-5189
Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted navigation to blob…
Not rated
CVE-2016-5181
Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted execution…
Not rated
CVE-2016-5190
Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled object…
Not rated