Navigation Flaw in PDFium Affects Google Chrome Across Multiple Platforms
CVE-2016-5220

6.5MEDIUM

Key Information:

Vendor: Google
Status: Google Chrome Prior To 55.0.2883.75 For Mac, Windows And Linux, And 55.0.2883.84 For Android
Vendor: CVE Published:; 19 January 2017

What is CVE-2016-5220?

A navigation flaw in PDFium, part of Google Chrome, has been identified, affecting multiple platforms including Mac, Windows, Linux, and Android. This vulnerability could allow a remote attacker to leverage a specially crafted PDF file to read local files on the user's system. This exploit occurs due to improper handling of navigation within PDF documents, highlighting the necessity for users to keep their browser updated to mitigate such risks.

Affected Version(s)

Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android