CVE-2019-13706

CVE-2019-13706 is an out-of-bounds memory access vulnerability in PDFium, affecting Google Chrome prior to version 78.0.3904.70, as well as Google Backports_SLE and OpenSUSE distributions. This high-severity vulnerability (CVSS 7.8) can be triggered by a remote attacker via a crafted PDF file, potentially leading to heap corruption and high impacts on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness despite its inactive status on the CISA KEV list.