Heap Corruption Vulnerability in Google Chrome Affecting Multiple Platforms
CVE-2016-5184
Key Information:
- Vendor
Google
- Vendor
- CVE Published:
- 18 December 2016
What is CVE-2016-5184?
In Google Chrome versions prior to 54.0.2840.59 for Windows, Mac, and Linux, and 54.0.2840.85 for Android, an issue in the PDFium library could lead to improper handling of object lifecycles in the CFFL_FormFillter::KillFocusForAnnot function. This flaw enables remote attackers to craft malicious PDF files that may exploit heap corruption, potentially allowing an attacker to execute arbitrary code or crash the application.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved