DEBIAN-CVE-2026-121113: Buffer Overflow
Published Nov 3, 2026
·Updated
Buffer overflow in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)
Affected Software
3 affected components
debian/chromium*
debian/chromium*
debian/chromium*
Event History
Nov 3, 2026
CVE Published
via OSV·09:17 PM
Data Sourced
via OSV·09:17 PM
DescriptionAffected Software
Frequently Asked Questions
1
What must an attacker do to exploit this issue?
The attacker must cause Chromium to process a crafted PDF file. Successful exploitation can execute arbitrary code inside Chromium's sandbox.
2
What is the known affected version boundary?
The issue affects Google Chrome versions before 157.0.8103.38. The provided data identifies Debian Chromium as the affected software but does not specify the Debian package version containing the fix.