CVE-2024-7973

Summary

CVE-2024-7973 identifies a heap buffer overflow vulnerability in PDFium within Google Chrome versions prior to 128.0.6613.84, which enables remote attackers to conduct out-of-bounds memory reads via specially crafted PDF files. This vulnerability affects a wide range of products, including several Chrome-based applications. The potential impact is significant, with a CVSS score of 8.8 indicating high severity, and it can lead to unauthorized access to sensitive information and compromise system integrity. Remediation involves updating Google Chrome to the latest version to mitigate the risk associated with this vulnerability. Organizations are advised to ensure that their users apply these updates promptly to protect against potential exploits that leverage this flaw.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.