EIP-2026-103626

This is a detailed technical analysis of a heap overflow vulnerability in PDFium's shading pattern handling, specifically in the DrawRadialShading function. The writeup explains the root cause, including integer overflow in CountOutputs and lack of validation in function signatures, leading to out-of-bounds writes.