232 matches found
CVE-2016-7445
convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via vectors involving the variable s...
CVE-2016-7445
convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via vectors involving the variable s...
CVE-2015-8871
Use-after-free vulnerability in the opjj2kwritemco function in j2k.c in OpenJPEG before 2.1.1 allows remote attackers to have unspecified impact via unknown vectors...
CVE-2016-5158
Multiple integer overflows in the opjtcdinittile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified...
CVE-2016-5157
Heap-based buffer overflow in the opjdwtinterleavev function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to execute arbitrary code via crafted coordinate values in JPEG 2000 data...
CVE-2016-5152
Integer overflow in the opjtcdgetdecodedtilesize function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified...
OpenJPEG opj_pi_create_decode Integer Overflow Vulnerability
OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability exists in OpenJPEG's opjpicreatedecode function, which allows remote attackers to construct specially crafted JPEG 2000 images triggering an integer overflow vulnerability, ultimately leading to out-of-bounds read and...
OpenJPEG 'sycc422_to_rgb_of_color' function denial of service vulnerability
OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability in OpenJPEG's sycc422torgbofcolor function allows remote attackers to construct specially crafted JPEG 2000 images for denial-of-service attacks or to remotely execute arbitrary code...
UBUNTU-CVE-2016-1681
Heap-based buffer overflow in the opjj2kreadSPCodSPCoc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document...
OpenJPEG heap buffer overflow vulnerability (CNVD-2016-03345)
OpenJPEG is a C-based open source JPEG 2000 codec . A heap buffer overflow vulnerability exists in the 'colorcmyktorgb' function in OpenJPEG's color.c file. An attacker could exploit this vulnerability to cause a denial of service...
Vulnerabilities in the Google Chrome browser that allow a perpetrator to trigger a service failure or cause other effects
The multiple vulnerabilities of the opjj2kupdateimagedata function j2k.c in the OpenJPEG component, which is used in the Google Chrome browser’s PDFium engine, are caused by buffer overflows. Exploitation of these vulnerabilities could allow a malicious actor to cause a service failure memory spi...
OpenJPEG 'opj_pi_next_cprl' function denial of service vulnerability (CNVD-2016-05612)
OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability in OpenJPEG's opjpinextcprl function line 526 of the pi.c file allows remote attackers to exploit the vulnerability to construct specially crafted JPEG 2000 images for denial of service attacks...
The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.
The vulnerability of the opjpiupdatedecodepoc function pi.c in the OpenJPEG component of the Google Chrome PDFium browser is caused by buffer overflow. Exploiting this vulnerability could allow an attacker to trigger a service failure memory-bound reading using a specially crafted PDF document...
CVE-2016-1628
pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value, which allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a crafted JPEG 2000 image in a PDF document, related to the...
chromium-browser: out-of-bounds read in PDFium
The opjpiupdatedecodepoc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, miscalculates a certain layer index value, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...
CVE-2016-1626
The opjpiupdatedecodepoc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, miscalculates a certain layer index value, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted PDF document...
CVE-2016-1626
CVE-2016-1626 affects Google Chrome (before 48.0.2564.109) via OpenJPEG used in PDFium. The opj_pi_update_decode_poc function in pi.c miscalculates a layer index value, enabling a remote attacker to cause a denial of service (out-of-bounds read) through a crafted PDF document. Remediation: update...
CVE-2016-1924
The opjtgtreset function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image...
CVE-2016-1923
Heap-based buffer overflow in the opjj2kupdateimagedata function in OpenJpeg 2016.1.18 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG 2000 image...