CVE-2018-20072

Published: Sep 23, 2024Modified: Mar 25, 2025

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Insufficient data validation in PDF in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform out of bounds memory access via a crafted PDF file. (Chromium security severity: Low)

Affected (1)

Products: Google: Chrome

Google

1 product

Chrome

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Google Chrome	Before 73.0.3683.75

References (1)

https://issues.chromium.org/issues/40093560

Source: chrome-cve-admin@google.com

Issue TrackingVendor Advisory

Timeline

No history available yet.