CVE-2016-5139Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Chrome

Severity
7.6HIGHNVD
EPSS
1.5%
top 18.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedAug 7
Latest updateMay 14

Description

Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:HExploitability: 2.8 | Impact: 4.7

Affected Packages2 packages

Debianthe_openjpeg_project/openjpeg2< 2.1.2-1+3
NVDgoogle/chrome52.0.2743.82

🔴Vulnerability Details

3
GHSA
GHSA-gmg5-8m74-xp62: Multiple integer overflows in the opj_tcd_init_tile function in tcd2022-05-14
OSV
CVE-2016-5139: Multiple integer overflows in the opj_tcd_init_tile function in tcd2016-08-07
CVEList
CVE-2016-5139: Multiple integer overflows in the opj_tcd_init_tile function in tcd2016-08-07

📋Vendor Advisories

2
Red Hat
openjpeg: Heap overflow in parsing of JPEG2000 precincts2016-08-03
Debian
CVE-2016-5139: openjpeg2 - Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPE...2016

💬Community

5
Bugzilla
CVE-2016-5139 openjpeg2: chromium-browser, openjpeg: Heap overflow in parsing of JPEG2000 precincts [fedora-all]2017-03-23
Bugzilla
CVE-2016-5139 CVE-2016-5158 CVE-2016-5159 openjpeg2: various flaws [epel-6]2017-02-16
Bugzilla
CVE-2016-5139 CVE-2016-5158 CVE-2016-5159 openjpeg2: various flaws [epel-7]2017-02-16
Bugzilla
CVE-2016-5139 CVE-2016-5158 CVE-2016-5159 openjpeg: various flaws [fedora-all]2017-02-16
Bugzilla
CVE-2016-5139 chromium-browser, openjpeg: Heap overflow in parsing of JPEG2000 precincts2016-08-04
CVE-2016-5139 — Google Chrome vulnerability | cvebase