CVE-2016-5157
- State
- Published
- Severity
- Not scored
- Published
- Sep 11, 2016
- Updated
- Aug 6, 2024
- Reserved
- May 31, 2016
Description
Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to execute arbitrary code via crafted coordinate values in JPEG 2000 data.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- openSUSE-SU-2016:2250vendor-advisory
- https://googlechromereleases.blogspot.com/2016/08/stable-channel-update-for-desktop_31.html
- https://github.com/uclouvain/openjpeg/commit/e078172b1c3f98d2219c37076b238fb759c751ea
- SUSE-SU-2016:2251vendor-advisory
- 92717vdb-entry
- 1036729vdb-entry
- FEDORA-2016-231f53426bvendor-advisory
- FEDORA-2016-8ed6b7bb5evendor-advisory
- [oss-security] 20160908 Re: CVE Request: OpenJPEG Heap Buffer Overflow Issuemailing-list
- https://pdfium.googlesource.com/pdfium/+/b6befb2ed2485a3805cddea86dc7574510178ea9
- DSA-4013vendor-advisory
- openSUSE-SU-2016:2349vendor-advisory
- DSA-3660vendor-advisory
- https://crbug.com/632622
- FEDORA-2016-dc53ceffc2vendor-advisory
- GLSA-201610-09vendor-advisory
- openSUSE-SU-2016:2296vendor-advisory
- RHSA-2016:1854vendor-advisory
- FEDORA-2016-2eac99579cvendor-advisory
- FEDORA-2016-27d3b7742fvendor-advisory
- FEDORA-2016-adb346980cvendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1374337
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.