Integer overflow

Multiple integer overflows in the opjtcdinittile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified...

UBUNTU-CVE-2016-5152

Integer overflow in the opjtcdgetdecodedtilesize function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified...

UBUNTU-CVE-2016-5151

PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux mishandles timers, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted PDF document, related to...

CVE-2016-5151

PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux mishandles timers, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted PDF document, related to...

Heap overflow

Heap-based buffer overflow in the opjdwtinterleavev function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to execute arbitrary code via crafted coordinate values in JPEG 2000 data...

Heap overflow

Multiple heap-based buffer overflows in PDFium, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JBig2 image...

CVE-2016-5158

Multiple integer overflows in the opjtcdinittile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified...

CVE-2016-5154

Multiple heap-based buffer overflows in PDFium, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JBig2 image...

CVE-2016-5159

Multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted JPEG 2000 data...

UBUNTU-CVE-2016-5159

Multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted JPEG 2000 data...

UBUNTU-CVE-2016-5158

Multiple integer overflows in the opjtcdinittile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified...

CVE-2016-5151

CVE-2016-5151 refers to a use-after-free in PDFium used by Google Chrome. The flaw occurs when handling timers in PDFium (PDF rendering component) and can be triggered by a crafted PDF document, potentially causing a denial of service (use-after-free) and, per related sources, may allow broader i...

CVE-2016-5158

CVE-2016-5158 involves multiple integer overflows in the opj_tcd_init_tile function of OpenJPEG (tcd.c) used by PDFium in Google Chrome. The issue allows remote attackers to trigger a heap-based buffer overflow via specially crafted JPEG 2000 data, potentially causing a denial of service or other...

CVE-2016-5157

CVE-2016-5157: A heap-based buffer overflow in opj_dwt_interleave_v (OpenJPEG) affects PDFium in Google Chrome; exploitation possible via crafted JPEG 2000 data. Affected Chrome builds were prior to 53.0.2785.89 on Windows/OS X and prior to 53.0.2785.92 on Linux. Debian/FreeBSD advisories referen...

CVE-2016-5158

Multiple integer overflows in the opjtcdinittile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified...

CVE-2016-5152

CVE-2016-5152 affects OpenJPEG as used by PDFium in Google Chrome prior to 53.0.2785.89 (Windows/OS X) and prior to 53.0.2785.92 (Linux). Root cause: integer overflow in opj_tcd_get_decoded_tile_size in tcd.c, leading to a heap-based buffer overflow when processing crafted JPEG 2000 data, enablin...

CVE-2016-5151

Removed by vendor...

CVE-2016-5154

CVE-2016-5154 is a PDFium-related heap overflow in Chromium/Chrome affecting the PDF rendering path (via crafted JBig2 images). Public sources confirm the flaw exists in Chromium/Chrome around 53.x branches and was fixed in later releases. Debian advisories map CVE-2016-5154 to chromium-browser u...

CVE-2016-5159

CVE-2016-5159 covers multiple integer overflows in OpenJPEG as used by PDFium in Google Chrome, exploitable via crafted JPEG2000 data that is mishandled during opj_aligned_malloc in dwt.c and t1.c. Affected: Chrome before 53.0.2785.89 on Windows/macOS and before 53.0.2785.92 on Linux. Consequence...

CVE-2016-5157

Heap-based buffer overflow in the opjdwtinterleavev function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to execute arbitrary code via crafted coordinate values in JPEG 2000 data...