Vulnerability in Google Chrome
CVE-2015-6758
The CPDF_Document::GetPage function in fpdfapi/fpdf_parser/fpdf_parser_document.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, does not properly perform a cast of a dictionary object, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.
EPSS: 0.014 (70.3th percentile) — read the EPSS interpretation.
Affected products
- Google Chrome
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- chrome-cve-admin@google.com (x_refsource_CONFIRM)
- chrome-cve-admin@google.com (vdb-entry, x_refsource_BID)
- chrome-cve-admin@google.com (vendor-advisory, x_refsource_DEBIAN)
- chrome-cve-admin@google.com (x_refsource_CONFIRM)
- chrome-cve-admin@google.com (vendor-advisory, x_refsource_GENTOO)
- chrome-cve-admin@google.com (vdb-entry, x_refsource_SECTRACK)
- chrome-cve-admin@google.com (x_refsource_REDHAT, vendor-advisory)
- chrome-cve-admin@google.com (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2015-6758?
- CVE-2015-6758 is a vulnerability in Google Chrome, classified under CWE-17. Published 2015-10-15.
- Is CVE-2015-6758 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.