YFarmX logoYFarmX

Tools AI-Found Vulnerability Register aifv-0121

Register entry

Chrome PDF: memory corruption

CVE
CVE-2026-113212
Project
Google Chrome
Component
PDF
Finder
Xinyang Ge assisted by Claude
Autonomy
human researcher assisted by Claude
Evidence tier
CNA credits the finder in its own advisory
Assigner
Chrome
Severity
High (Chromium security severity)
Confidence
CONFIRMED

What happened

Google’s Chrome 156 release credits Xinyang Ge (Anthropic), assisted by Claude with this PDF finding.

Credit as recorded: Xinyang Ge (Anthropic), assisted by Claude. The release was published on 20 October 2026. Google lists the researcher report date as 2026-10-10. The fix is in 156.0.8078.47 for Linux and 156.0.8078.47/.48 for Windows and macOS. The listed reward is N/A, so the register records no confirmed payment. The public credit supplies no model version. Date basis: CNA publication and Chrome 156 release; researcher report date 2026-10-10.

Sources

One record from the AI-Found Vulnerability Register, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 28 October 2026