PT-2025-9739 · Google+4 · Google Chrome+5

Asnine · Published 2025-03-04 · Updated 2025-04-03 · CVE-2025-1918

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 134.0.6998.35

Description The issue allows a remote attacker to potentially perform out of bounds memory access via a crafted PDF file. This is due to an out of bounds read in PDFium in Google Chrome. The severity of this issue is classified as medium by Chromium.

Recommendations For Google Chrome versions prior to 134.0.6998.35, update to version 134.0.6998.35 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted PDF files until the update is applied.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2025-4164

ALT-PU-2025-4366

BDU:2025-02673

CVE-2025-1918

DSA-5875-1

MGASA-2025-0091

OPENSUSE-SU-2025:0084-1

OPENSUSE-SU-2025:14854-1

Affected Products

Alt Linux

Astra Linux

Debian

Google Chrome

Pdfium

Red Os

References · 71

• https://osv.dev/vulnerability/DEBIAN-CVE-2025-1918 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5875-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02673 · Security Note
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0091 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0923SE17 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-1918 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:0084-1 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/718831 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-1918 · Security Note
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0091.html · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-1918 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory