Back to search
CVE-2016-5139
Published: Aug 7, 2016
Modified: Aug 6, 2024
PUBLISHED
Description
Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
[debian-lts-announce] 20180719 [SECURITY] [DLA 1433-1] openjpeg2 security update
mailing-list
x_refsource_MLIST
92276
vdb-entry
x_refsource_BID
https://crbug.com/625541
x_refsource_CONFIRM
openSUSE-SU-2016:1983
vendor-advisory
x_refsource_SUSE
RHSA-2016:1580
vendor-advisory
x_refsource_REDHAT
RHSA-2017:0559
vendor-advisory
x_refsource_REDHAT
RHSA-2017:0838
vendor-advisory
x_refsource_REDHAT
1036547
vdb-entry
x_refsource_SECTRACK
GLSA-201610-09
vendor-advisory
x_refsource_GENTOO
https://codereview.chromium.org/2124073003
x_refsource_CONFIRM
openSUSE-SU-2016:1982
vendor-advisory
x_refsource_SUSE
DSA-3645
vendor-advisory
x_refsource_DEBIAN
FEDORA-2016-e9798eaaa3
vendor-advisory
x_refsource_FEDORA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now