CVE-2015-1225 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Chrome

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory BufferCWE-125 — Out-of-bounds Read5 documents5 sources
Severity
5.0MEDIUMNVD
EPSS
0.8%
top 26.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Chrome
Timeline
PublishedMar 9
Latest updateMay 17

Description

PDFium, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDgoogle/chrome40.0.2214.115

🔴Vulnerability Details

2
GHSA
GHSA-8m76-vrj2-f7q6: PDFium, as used in Google Chrome before 41↗2022-05-17
▶
OSV
CVE-2015-1225: PDFium, as used in Google Chrome before 41↗2015-03-09
▶

📋Vendor Advisories

1
Red Hat
chromium-browser: Out-of-bounds read in pdfium↗2015-03-03
▶

💬Community

1
Bugzilla
CVE-2015-1225 chromium-browser: Out-of-bounds read in pdfium↗2015-03-04
▶