Vulnerability Spotlight: Google PDFium JBIG2 Image Compose ToOpt2With Rect Information Disclosure Vulnerability
Summary: Cisco Talos discovered a heap buffer overflow in the code that decodes JBIG2 image streams, reported by Aleksandar Nikolic, and worked with Google under coordinated disclosure to resolve it and release an update. Exploiting the flaw requires an attacker to supply a specific PDF that describes the JBIG2 image details.
Bottom line: The exploit path is a single crafted PDF, so the exposure sits with anyone who opens untrusted documents before the Google update is applied - Talos recommends applying it as quickly as possible.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026