CVE-2016-5157

Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS…

published September 11, 2016

CVSS
—
EPSS
5%
Percentile
91.7
In the wild
Unconfirmed
What it is

Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to execute arbitrary code via crafted coordinate values in JPEG 2000 data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04702 · 91.7th percentile
Published
2016-09-11T10:00Z
EPSS history
Timeline
  • 11 SEP 10:00Z
    Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS…
    cvelistv5