CVE-2025-1918

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 134.0.6998.35

Description The issue allows a remote attacker to potentially perform out of bounds memory access via a crafted PDF file. This is due to an out of bounds read in PDFium in Google Chrome. The severity of this issue is classified as medium by Chromium.

Recommendations For Google Chrome versions prior to 134.0.6998.35, update to version 134.0.6998.35 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted PDF files until the update is applied.