High severity8.8NVD Advisory· Published Jan 9, 2019· Updated Jun 17, 2026

CVE-2018-17461

Description

An out of bounds read in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.

Affected products

Google/Pdfiumllm-fuzzy
Range: <68.0.3440.75
Google/Chromellm-fuzzy3 versions
<68.0.3440.75+ 2 more
- (no CPE)range: <68.0.3440.75
- (no CPE)range: unspecified
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*range: <68.0.3440.75
Debian/linux
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Desktop
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Workstation
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.htmlnvd
crbug.com/874359nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000