CVE-2018-6072

CVE-2018-6072 describes an integer overflow vulnerability in PDFium, a PDF rendering engine used in Google Chrome prior to version 65.0.3325.146, also affecting Debian and Red Hat. This flaw could lead to a use-after-free condition, potentially allowing a remote attacker to exploit heap corruption via a specially crafted PDF file. With a CVSS score of 8.8 (High), it presents a significant risk, requiring user interaction (UI:R) but allowing exploitation over the network (AV:N) with low attack complexity (AC:L), leading to high impacts on confidentiality, integrity, and availability (C:H/I:H/A:H). While the vulnerability has a high FAUCET Risk Score of 71/100 and some community discussion and media coverage, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB.