Cloud Vulnerability DB
An open project to list all known cloud vulnerabilities and Cloud Service Provider security issues
Vulnerability DatabaseCVE-2018-20072
CVE-2018-20072:
Google Chrome vulnerability analysis and mitigation
Overview
CVE-2018-20072 is a vulnerability discovered in Google Chrome's PDF handling component prior to version 73.0.3683.75. The vulnerability stems from insufficient data validation in the PDF processing functionality, which could allow remote attackers to perform out-of-bounds memory access through a specially crafted PDF file (NVD).
Technical details
The vulnerability is related to insufficient validation in CPDF_Annot quad point methods, specifically in BoundingRectFromQuadPoints() and RectFromQuadPoints() functions. These methods failed to handle out-of-bound indices properly. The vulnerability has been assigned a CVSS v3.1 Base Score of 7.8 (HIGH), with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (NVD, Chromium Issue).
Impact
While initially concerning, the actual security impact was determined to be Low according to Chromium's security severity assessment. In non-debug builds, subsequent GetNumberAt() calls are bounds-checked and do not show any memory corruption under address sanitizer (ASAN) builds of the vulnerable version (Chromium Issue).
Mitigation and workarounds
The vulnerability was fixed in Google Chrome version 73.0.3683.75. The fix involved implementing proper validation in the CPDF_Annot quad point methods to handle out-of-bound indices gracefully. The patch was committed with the change ID: I548691dc4110ff509e94a9e961bd760fa10e505f (Chromium Issue).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
Ready to see Wiz in action?
“Best User Experience I have ever seen, provides full visibility to cloud workloads.”
David EstlickCISO
“Wiz provides a single pane of glass to see what is going on in our cloud environments.”
Adam FletcherChief Security Officer
“We know that if Wiz identifies something as critical, it actually is.”
Greg PoniatowskiHead of Threat and Vulnerability Management