CVE-2016-5216

CVE-2016-5216 describes a use-after-free vulnerability in PDFium, the PDF rendering engine used by Google Chrome prior to versions 55.0.2883.75 (Mac, Windows, Linux) and 55.0.2883.84 (Android). This flaw allowed a remote attacker to achieve an out-of-bounds memory read by enticing a user to open a specially crafted PDF file. With a CVSS score of 6.3 (Medium), the vulnerability has a network attack vector, low attack complexity, and could lead to limited confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability garnered some community discussion and media coverage at the time of its disclosure.