p PatchFirst

CVE-2026-2648

CVE-2026-2648

CVSS 8.8 · High · EPSS 0.5% · Fix available

Are you affected?

  • chromeNo fix published
  • chromium Debian 12Update to 145.0.7632.109-1~deb12u3
  • chromium Debian 13Update to 145.0.7632.109-1~deb13u3
  • chromium Debian 14Update to 145.0.7632.109-1

Check the installed version:

dpkg-query -W -f='${source:Package} ${binary:Package} ${Version}\n' | awk '$1=="chromium"'

The free check shows your server's rating and highlights whether chrome and the rest of its software need attention. No sign-up; server names and IP addresses are never sent. CVE IDs, fixed versions and recommendations come with paid monitoring.

curl -fsSL https://patchfirst.dev/check.sh | sh
Check your server for free →

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file. (Chromium security severity: High)

Published
Updated

Stack: system

Affected products and versions

  • chrome

    Versions
    • ≥ 145.0.7632.109, < 145.0.7632.109: Affected (custom)

    No fix published

  • chromium Debian 12

    Versions
    • 113.0.5672.126-1
    • 114.0.5735.106-1
    • 114.0.5735.106-1~deb11u1
    • 114.0.5735.106-1~deb12u1
    • 114.0.5735.133-1
    • 114.0.5735.133-1~deb11u1
    All versions (187)
    • 114.0.5735.133-1~deb12u1
    • 114.0.5735.198-1
    • 114.0.5735.198-1~deb11u1
    • 114.0.5735.198-1~deb12u1
    • 114.0.5735.90-1
    • 114.0.5735.90-2
    • 114.0.5735.90-2~deb11u1
    • 114.0.5735.90-2~deb12u1
    • 115.0.5790.102-1
    • 115.0.5790.102-2
    • 115.0.5790.170-1
    • 115.0.5790.170-1~deb11u1
    • 115.0.5790.170-1~deb12u1
    • 115.0.5790.98-1
    • 115.0.5790.98-1~deb11u1
    • 115.0.5790.98-1~deb12u1
    • 115.0.5790.98-2
    • 116.0.5845.110-1
    • 116.0.5845.110-1~deb11u1
    • 116.0.5845.110-1~deb12u1
    • 116.0.5845.110-2
    • 116.0.5845.140-1
    • 116.0.5845.140-1~deb11u1
    • 116.0.5845.140-1~deb12u1
    • 116.0.5845.180-1
    • 116.0.5845.180-1~deb11u1
    • 116.0.5845.180-1~deb12u1
    • 116.0.5845.96-1
    • 116.0.5845.96-1~deb11u1
    • 116.0.5845.96-1~deb12u1
    • 116.0.5845.96-2
    • 117.0.5938.132-1
    • 117.0.5938.132-1~deb11u1
    • 117.0.5938.132-1~deb12u1
    • 117.0.5938.132-2
    • 117.0.5938.149-1
    • 117.0.5938.149-1~deb11u1
    • 117.0.5938.149-1~deb12u1
    • 117.0.5938.62-1
    • 117.0.5938.62-1~deb11u1
    • 117.0.5938.62-1~deb12u1
    • 117.0.5938.92-1
    • 118.0.5993.117-1
    • 118.0.5993.117-1~deb11u1
    • 118.0.5993.117-1~deb12u1
    • 118.0.5993.70-1
    • 118.0.5993.70-1~deb11u1
    • 118.0.5993.70-1~deb12u1
    • 119.0.6045.105-1
    • 119.0.6045.105-1~deb11u1
    • 119.0.6045.105-1~deb12u1
    • 119.0.6045.123-1
    • 119.0.6045.123-1~deb11u1
    • 119.0.6045.123-1~deb12u1
    • 119.0.6045.159-1
    • 119.0.6045.159-1~deb11u1
    • 119.0.6045.159-1~deb12u1
    • 119.0.6045.199-1
    • 119.0.6045.199-1~deb11u1
    • 119.0.6045.199-1~deb12u1
    • 120.0.6099.109-1
    • 120.0.6099.109-1~deb11u1
    • 120.0.6099.109-1~deb12u1
    • 120.0.6099.129-1
    • 120.0.6099.129-1~deb11u1
    • 120.0.6099.129-1~deb12u1
    • 120.0.6099.199-1
    • 120.0.6099.199-1~deb11u1
    • 120.0.6099.199-1~deb12u1
    • 120.0.6099.216-1
    • 120.0.6099.216-1~deb11u1
    • 120.0.6099.216-1~deb12u1
    • 120.0.6099.224-1
    • 120.0.6099.224-1~deb11u1
    • 120.0.6099.224-1~deb12u1
    • 120.0.6099.224-2
    • 120.0.6099.71-1
    • 120.0.6099.71-1~deb11u1
    • 120.0.6099.71-1~deb12u1
    • 121.0.6167.139-1
    • 121.0.6167.139-1~deb12u1
    • 121.0.6167.160-1
    • 121.0.6167.160-1~deb12u1
    • 121.0.6167.85-1
    • 121.0.6167.85-1~deb12u1
    • 122.0.6261.111-1
    • 122.0.6261.111-1~deb12u1
    • 122.0.6261.128-1
    • 122.0.6261.128-1~deb12u1
    • 122.0.6261.57-1
    • 122.0.6261.57-1~deb12u1
    • 122.0.6261.94-1
    • 122.0.6261.94-1~deb12u1
    • 123.0.6312.105-1
    • 123.0.6312.105-1~deb12u1
    • 123.0.6312.105-1~deb13u1
    • 123.0.6312.105-2
    • 123.0.6312.122-1
    • 123.0.6312.122-1~deb12u1
    • 123.0.6312.58-1
    • 123.0.6312.86-1
    • 123.0.6312.86-1~deb12u1
    • 124.0.6367.118-1
    • 124.0.6367.118-1~deb12u1
    • 124.0.6367.155-1
    • 124.0.6367.155-1~deb12u1
    • 124.0.6367.201-1
    • 124.0.6367.201-1~deb12u1
    • 124.0.6367.207-1
    • 124.0.6367.207-1~deb12u1
    • 124.0.6367.60-1
    • 124.0.6367.60-1~deb12u1
    • 124.0.6367.60-2
    • 124.0.6367.78-1
    • 124.0.6367.78-1~deb12u1
    • 125.0.6422.112-1
    • 125.0.6422.112-1~deb12u1
    • 125.0.6422.141-1
    • 125.0.6422.141-1~deb12u1
    • 125.0.6422.60-1
    • 125.0.6422.60-1~deb12u1
    • 125.0.6422.76-1
    • 125.0.6422.76-1~deb12u1
    • 126.0.6478.114-1
    • 126.0.6478.114-1~deb12u1
    • 126.0.6478.126-1
    • 126.0.6478.126-1~deb12u1
    • 126.0.6478.126-1~deb13u1
    • 126.0.6478.182-1
    • 126.0.6478.182-1~deb12u1
    • 126.0.6478.56-1
    • 126.0.6478.56-1~deb12u1
    • 127.0.6533.119-1
    • 127.0.6533.119-1~deb13u1
    • 127.0.6533.88-1
    • 127.0.6533.88-1~deb12u1
    • 127.0.6533.99-1
    • 127.0.6533.99-1~deb12u1
    • 128.0.6613.113-1
    • 128.0.6613.113-1~deb12u1
    • 128.0.6613.113-1~deb13u1
    • 128.0.6613.119-1
    • 128.0.6613.119-1~deb12u1
    • 128.0.6613.137-1
    • 128.0.6613.137-1~deb12u1
    • 128.0.6613.84-1
    • 128.0.6613.84-1~deb12u1
    • 129.0.6668.100-1
    • 129.0.6668.100-1~deb12u1
    • 129.0.6668.100-2
    • 129.0.6668.58-1
    • 129.0.6668.58-1~deb12u1
    • 129.0.6668.70-1
    • 129.0.6668.70-1~deb12u1
    • 129.0.6668.89-1
    • 129.0.6668.89-1~deb12u1
    • 130.0.6723.116-1
    • 130.0.6723.116-1~deb12u1
    • 130.0.6723.58-1
    • 130.0.6723.58-1~deb12u1
    • 130.0.6723.69-1
    • 130.0.6723.69-1~deb12u1
    • 130.0.6723.91-1
    • 130.0.6723.91-1~deb12u1
    • 130.0.6723.91-2
    • 131.0.6778.108-1
    • 131.0.6778.108-1~deb12u1
    • 131.0.6778.139-1
    • 131.0.6778.139-1~deb12u1
    • 131.0.6778.204-1
    • 131.0.6778.204-1~deb12u1
    • 131.0.6778.264-1
    • 131.0.6778.264-1~deb12u1
    • 131.0.6778.85-1
    • 131.0.6778.85-1~deb12u1
    • 132.0.6834.110-1
    • 132.0.6834.110-1~deb12u1
    • 132.0.6834.159-1
    • 132.0.6834.159-1~deb12u1
    • 132.0.6834.83-1
    • 133.0.6943.126-1

    Update to 145.0.7632.109-1~deb12u3

  • chromium Debian 13

    Versions
    • 138.0.7204.183-1
    • 139.0.7258.127-1
    • 139.0.7258.127-1~deb12u1
    • 139.0.7258.127-1~deb13u1
    • 139.0.7258.127-2
    • 139.0.7258.138-1
    All versions (78)
    • 139.0.7258.138-1~deb12u1
    • 139.0.7258.138-1~deb13u1
    • 139.0.7258.154-1
    • 139.0.7258.154-1~deb12u1
    • 139.0.7258.154-1~deb13u1
    • 139.0.7258.66-1
    • 139.0.7258.66-1~deb12u1
    • 140.0.7339.127-1
    • 140.0.7339.127-1~deb12u1
    • 140.0.7339.127-1~deb13u1
    • 140.0.7339.185-1
    • 140.0.7339.185-1~deb12u1
    • 140.0.7339.185-1~deb13u1
    • 140.0.7339.207-1
    • 140.0.7339.207-1~deb12u1
    • 140.0.7339.207-1~deb13u1
    • 140.0.7339.80-1
    • 140.0.7339.80-1~deb12u1
    • 140.0.7339.80-1~deb13u1
    • 141.0.7390.107-1
    • 141.0.7390.107-1~deb12u1
    • 141.0.7390.107-1~deb13u1
    • 141.0.7390.122-1
    • 141.0.7390.122-1~deb12u1
    • 141.0.7390.122-1~deb13u1
    • 141.0.7390.54-1
    • 141.0.7390.54-1~deb12u1
    • 141.0.7390.54-1~deb13u1
    • 141.0.7390.65-1
    • 141.0.7390.65-1~deb12u1
    • 141.0.7390.65-1~deb13u1
    • 142.0.7444.134-1
    • 142.0.7444.134-1~deb12u1
    • 142.0.7444.134-1~deb13u1
    • 142.0.7444.162-1
    • 142.0.7444.162-1~deb12u1
    • 142.0.7444.162-1~deb13u1
    • 142.0.7444.175-1
    • 142.0.7444.175-1~deb12u1
    • 142.0.7444.175-1~deb13u1
    • 142.0.7444.59-1
    • 142.0.7444.59-1~deb12u1
    • 142.0.7444.59-1~deb13u1
    • 143.0.7499.109-1
    • 143.0.7499.109-1~deb12u1
    • 143.0.7499.109-1~deb13u1
    • 143.0.7499.169-1
    • 143.0.7499.169-1~deb12u1
    • 143.0.7499.169-1~deb13u1
    • 143.0.7499.192-1
    • 143.0.7499.192-1~deb12u1
    • 143.0.7499.192-1~deb13u1
    • 143.0.7499.40-1
    • 143.0.7499.40-1~deb12u1
    • 143.0.7499.40-1~deb13u1
    • 144.0.7559.109-1
    • 144.0.7559.109-1~deb12u1
    • 144.0.7559.109-1~deb13u1
    • 144.0.7559.109-2
    • 144.0.7559.109-2~deb12u1
    • 144.0.7559.109-2~deb13u1
    • 144.0.7559.59-1
    • 144.0.7559.59-1~deb12u1
    • 144.0.7559.59-1~deb13u1
    • 144.0.7559.96-1
    • 144.0.7559.96-1~deb12u1
    • 144.0.7559.96-1~deb13u1
    • 145.0.7632.109-1~deb12u3
    • 145.0.7632.45-1
    • 145.0.7632.75-1
    • 145.0.7632.75-1~deb12u1
    • 145.0.7632.75-1~deb13u1
    Affected ranges
    • ECOSYSTEM: < 145.0.7632.109-1~deb13u3

    Update to 145.0.7632.109-1~deb13u3

  • chromium Debian 14

    Versions
    • 138.0.7204.183-1
    • 139.0.7258.127-1
    • 139.0.7258.127-1~deb12u1
    • 139.0.7258.127-1~deb13u1
    • 139.0.7258.127-2
    • 139.0.7258.138-1
    All versions (79)
    • 139.0.7258.138-1~deb12u1
    • 139.0.7258.138-1~deb13u1
    • 139.0.7258.154-1
    • 139.0.7258.154-1~deb12u1
    • 139.0.7258.154-1~deb13u1
    • 139.0.7258.66-1
    • 139.0.7258.66-1~deb12u1
    • 140.0.7339.127-1
    • 140.0.7339.127-1~deb12u1
    • 140.0.7339.127-1~deb13u1
    • 140.0.7339.185-1
    • 140.0.7339.185-1~deb12u1
    • 140.0.7339.185-1~deb13u1
    • 140.0.7339.207-1
    • 140.0.7339.207-1~deb12u1
    • 140.0.7339.207-1~deb13u1
    • 140.0.7339.80-1
    • 140.0.7339.80-1~deb12u1
    • 140.0.7339.80-1~deb13u1
    • 141.0.7390.107-1
    • 141.0.7390.107-1~deb12u1
    • 141.0.7390.107-1~deb13u1
    • 141.0.7390.122-1
    • 141.0.7390.122-1~deb12u1
    • 141.0.7390.122-1~deb13u1
    • 141.0.7390.54-1
    • 141.0.7390.54-1~deb12u1
    • 141.0.7390.54-1~deb13u1
    • 141.0.7390.65-1
    • 141.0.7390.65-1~deb12u1
    • 141.0.7390.65-1~deb13u1
    • 142.0.7444.134-1
    • 142.0.7444.134-1~deb12u1
    • 142.0.7444.134-1~deb13u1
    • 142.0.7444.162-1
    • 142.0.7444.162-1~deb12u1
    • 142.0.7444.162-1~deb13u1
    • 142.0.7444.175-1
    • 142.0.7444.175-1~deb12u1
    • 142.0.7444.175-1~deb13u1
    • 142.0.7444.59-1
    • 142.0.7444.59-1~deb12u1
    • 142.0.7444.59-1~deb13u1
    • 143.0.7499.109-1
    • 143.0.7499.109-1~deb12u1
    • 143.0.7499.109-1~deb13u1
    • 143.0.7499.169-1
    • 143.0.7499.169-1~deb12u1
    • 143.0.7499.169-1~deb13u1
    • 143.0.7499.192-1
    • 143.0.7499.192-1~deb12u1
    • 143.0.7499.192-1~deb13u1
    • 143.0.7499.40-1
    • 143.0.7499.40-1~deb12u1
    • 143.0.7499.40-1~deb13u1
    • 144.0.7559.109-1
    • 144.0.7559.109-1~deb12u1
    • 144.0.7559.109-1~deb13u1
    • 144.0.7559.109-2
    • 144.0.7559.109-2~deb12u1
    • 144.0.7559.109-2~deb13u1
    • 144.0.7559.59-1
    • 144.0.7559.59-1~deb12u1
    • 144.0.7559.59-1~deb13u1
    • 144.0.7559.96-1
    • 144.0.7559.96-1~deb12u1
    • 144.0.7559.96-1~deb13u1
    • 145.0.7632.109-1~deb12u3
    • 145.0.7632.109-1~deb13u3
    • 145.0.7632.45-1
    • 145.0.7632.75-1
    • 145.0.7632.75-1~deb12u1
    • 145.0.7632.75-1~deb13u1
    Affected ranges
    • ECOSYSTEM: < 145.0.7632.109-1

    Update to 145.0.7632.109-1

Original sources

Check your server →