CVE-2016-5139 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Chrome
Severity
7.6HIGHNVD
EPSS
1.5%
top 18.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 7
Latest updateMay 14
Description
Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:HExploitability: 2.8 | Impact: 4.7
Affected Packages2 packages
🔴Vulnerability Details
3GHSA
▶
CVEList
▶
📋Vendor Advisories
2💬Community
5Bugzilla▶
CVE-2016-5139 openjpeg2: chromium-browser, openjpeg: Heap overflow in parsing of JPEG2000 precincts [fedora-all]↗2017-03-23
Bugzilla
▶