Google Chrome PDFium Integer Overflow Vulnerability Allowing Arbitrary Code Execution

An integer overflow vulnerability has been identified in PDFium, a component of Google Chrome, in versions prior to 148.0.7778.216. This vulnerability allows a remote attacker who has compromised the renderer process to execute arbitrary code within a sandboxed environment by using a crafted font file.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution within the renderer process, potentially allowing the attacker to execute malicious code in a sandboxed environment.

Remediation

Users can update to Google Chrome version 148.0.7778.216 or later to address this vulnerability.