Executive brief
A vulnerability exists in Google Chrome's PDF viewing component, PDFium. An attacker who has already gained partial control over the browser's rendering process could use a specially crafted font file to execute malicious code. While this code would still be restricted by the browser's security sandbox, it represents a significant step in a multi-stage attack that could lead to full system compromise or data theft.
Technical details
An integer overflow vulnerability exists in PDFium, the PDF engine used in Google Chrome, specifically within the handling of font files. The flaw is triggered when processing a maliciously crafted font file. To exploit this, an attacker must first have compromised the renderer process (e.g., via a separate vulnerability). Successful exploitation allows the attacker to achieve arbitrary code execution within the Chrome sandbox. This vulnerability was addressed in Chrome version 148.0.7778.216.
Affected products
- Google Chrome prior to 148.0.7778.216
Timeline
- 2026-05-27: patched: Fixed in Chrome Stable Channel Update 148.0.7778.216/217
- 2026-05-28: disclosed: CVE published to NVD