CVE-2016-1686

Name of the Vulnerable Software and Affected Versions PDFium versions prior to 51.0.2704.63 Google Chrome versions prior to 51.0.2704.63

Description The issue is related to the CPDF DIBSource::CreateDecoder function in PDFium, which mishandles decoder-initialization failure. This allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.

Recommendations For PDFium versions prior to 51.0.2704.63, update to version 51.0.2704.63 or later. For Google Chrome versions prior to 51.0.2704.63, update to version 51.0.2704.63 or later. As a temporary workaround, consider disabling the CPDF DIBSource::CreateDecoder function until a patch is available.