CVE-2018-17469
chromium-browser: Incorrect handling of PDF filter chains in PDFium in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to...
CVE-2018-17469 is fixed in 5 products on 1 platform, first by chromium-browser 70.0.3538.67-0ubuntu0.18.04.1, released April 26, 2019. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0149
74th percentile
Incorrect handling of PDF filter chains in PDFium in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| chromium-browser · Ubuntu 18.04.6 LTS (bionic) | 70.0.3538.67-0ubuntu0.18.04.1 | chromium-browser 70.0.3538.67-0ubuntu0.18.04.1 | Apr 26, 2019 |
| chromium-browser-l10n · Ubuntu 18.04.6 LTS (bionic) | 70.0.3538.67-0ubuntu0.18.04.1 | chromium-browser-l10n 70.0.3538.67-0ubuntu0.18.04.1 | Apr 26, 2019 |
| chromium-chromedriver · Ubuntu 18.04.6 LTS (bionic) | 70.0.3538.67-0ubuntu0.18.04.1 | chromium-chromedriver 70.0.3538.67-0ubuntu0.18.04.1 | Apr 26, 2019 |
| chromium-codecs-ffmpeg · Ubuntu 18.04.6 LTS (bionic) | 70.0.3538.67-0ubuntu0.18.04.1 | chromium-codecs-ffmpeg 70.0.3538.67-0ubuntu0.18.04.1 | Apr 26, 2019 |
| chromium-codecs-ffmpeg-extra · Ubuntu 18.04.6 LTS (bionic) | 70.0.3538.67-0ubuntu0.18.04.1 | chromium-codecs-ffmpeg-extra 70.0.3538.67-0ubuntu0.18.04.1 | Apr 26, 2019 |