What the vulnerability does
01Description
Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file. (Chromium security severity: High)
CVSS base score
—
Key dates
02Disclosure timeline
February 18, 2026
CVE published
February 26, 2026
Record updated
External resources
