PT-2025-9739 · Google+4 · Google Chrome+5

Asnine · Publicado 2025-03-04 · Atualizado 2025-04-03 · CVE-2025-1918

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 134.0.6998.35

Description The issue allows a remote attacker to potentially perform out of bounds memory access via a crafted PDF file. This is due to an out of bounds read in PDFium in Google Chrome. The severity of this issue is classified as medium by Chromium.

Recommendations For Google Chrome versions prior to 134.0.6998.35, update to version 134.0.6998.35 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted PDF files until the update is applied.

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2025-4164

ALT-PU-2025-4366

BDU:2025-02673

CVE-2025-1918

DSA-5875-1

MGASA-2025-0091

OPENSUSE-SU-2025:0084-1

OPENSUSE-SU-2025:14854-1

Produtos afetados

Alt Linux

Astra Linux

Debian

Google Chrome

Pdfium

Red Os

Referências · 71

• https://osv.dev/vulnerability/DEBIAN-CVE-2025-1918 · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-5875-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2025-1922 · Nota
• https://security.paloaltonetworks.com/PAN-SA-2025-0007 · Nota
• https://issues.chromium.org/issues/388557904 · Nota
• https://twitter.com/windowsforum/status/1899327009685135423 · Publicação no Twitter
• https://twitter.com/windowsforum/status/1898100266127258084 · Publicação no Twitter
• https://twitter.com/windowsforum/status/1899311859095806404 · Publicação no Twitter
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/3.1 · Nota
• https://suse.com/security/cve/CVE-2025-1919 · Nota
• https://bdu.fstec.ru/vul/2025-02673 · Nota de Segurança
• https://lists.opensuse.org/archives/list/[e-mail]/thread/RXNDPKOASMYM2SMWNDENDFTKUIT4CM4A · Nota
• https://twitter.com/windowsforum/status/1899417662578438402 · Publicação no Twitter
• https://twitter.com/windowsforum/status/1899520901479125088 · Publicação no Twitter
• https://twitter.com/windowsforum/status/1899281790239387884 · Publicação no Twitter