VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 18, 2026· Updated Feb 26, 2026

CVE-2026-2648

CVE-2026-2648

Description

Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file. (Chromium security severity: High)

Affected products

2
  • Google/Chromellm-fuzzy2 versions
    <145.0.7632.109+ 1 more
    • (no CPE)range: <145.0.7632.109
    • (no CPE)range: 145.0.7632.109

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.