cbcvebase.
CVE-2024-7018
published 2024-09-23

CVE-2024-7018: Heap buffer overflow in PDF in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file…

PriorityP336high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.24%
15.1th percentile
Heap buffer overflow in PDF in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)

Affected

6 ranges
VendorProductVersion rangeFixed in
chromiumchromium>= 0 < 124.0.6367.78-1~deb12u1124.0.6367.78-1~deb12u1
chromiumchromium>= 0 < 124.0.6367.78-1124.0.6367.78-1
chromiumchromium>= 0 < 124.0.6367.78-1124.0.6367.78-1
debianchromium< chromium 124.0.6367.78-1~deb12u1 (bookworm)chromium 124.0.6367.78-1~deb12u1 (bookworm)
googlechrome< 124.0.6367.78124.0.6367.78
googlechrome>= 124.0.6367.78 < 124.0.6367.78124.0.6367.78

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.