A buffer overflow exists in PDFium, a PDF rendering engine, within Google Chrome on Windows. A remote attacker could use social engineering to trick a user into opening a specially crafted PDF file, potentially leading to arbitrary code execution inside the sandbox.