CVE-2016-1619

CVE-2016-1619 describes multiple integer overflow vulnerabilities within PDFium's sycc422_to_rgb and sycc444_to_rgb functions, impacting Google Chrome versions prior to 48.0.2564.82. This flaw allows remote attackers to trigger a denial of service via out-of-bounds reads, or potentially other unspecified impacts, by enticing a user to open a specially crafted PDF document. The vulnerability carries a CVSS v3 score of 7.6 (HIGH), indicating a network-based attack with low complexity, requiring user interaction, and leading to high availability impact and low confidentiality/integrity impact. While there is no evidence of active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the CVE has garnered some community discussion and media coverage, suggesting awareness within the security community.