Uninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.
References
Link | Resource |
---|---|
https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html | Release Notes Vendor Advisory |
https://crbug.com/1166091 | Exploit Issue Tracking Patch Permissions Required Third Party Advisory |
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/ | |
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/ | |
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/ | |
https://www.debian.org/security/2021/dsa-4886 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
07 Nov 2023, 03:29
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2021-03-09 18:15
Updated : 2024-02-28 18:08
NVD link : CVE-2021-21190
Mitre link : CVE-2021-21190
CVE.ORG link : CVE-2021-21190
JSON object : View
Products Affected
fedoraproject
- fedora
debian
- debian_linux
- chrome
CWE
CWE-908
Use of Uninitialized Resource