CVE-2018-20072
chromium: Insufficient data validation in PDF in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform out o...
CVE-2018-20072 is fixed in chromium on 1 platform, first by DEBIAN-CVE-2018-20072, released September 23, 2024. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
7.8
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0016
5th percentile
Insufficient data validation in PDF in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform out of bounds memory access via a crafted PDF file. (Chromium security severity: Low)
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| chromium · Debian 12.15 (bookworm) | 73.0.3683.75-1 | DEBIAN-CVE-2018-20072 | Sep 23, 2024 |
| chromium · Debian 13.5 (trixie) | 73.0.3683.75-1 | DEBIAN-CVE-2018-20072 | Sep 23, 2024 |
| chromium · Debian 14 | 73.0.3683.75-1 | DEBIAN-CVE-2018-20072 | Sep 23, 2024 |