CVE-2016-1681

Removed by vendor...

CVE-2016-1681: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the opjj2kreadSPCodSPCoc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document...

chromium-browser: heap overflow in pdfium

Heap-based buffer overflow in the opjj2kreadSPCodSPCoc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document...

PT-2016-2157

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 OpenJPEG affected versions not specified PDFium affected versions not specified Opera affected versions not specified Description The issue is caused by a heap-based buffer overflow in the opj j2k...

OpenJPEG De-Zero Error Vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A divide-by-zero error vulnerability exists in the 'opjtcdinittile' function in OpenJPEG's tcd.c file. An attacker could exploit this vulnerability to cause unknown impact...

OpenJPEG heap buffer overflow vulnerability (CNVD-2016-03345)

OpenJPEG is a C-based open source JPEG 2000 codec . A heap buffer overflow vulnerability exists in the 'colorcmyktorgb' function in OpenJPEG's color.c file. An attacker could exploit this vulnerability to cause a denial of service...

OpenJPEG 'opj_j2k_write_mco' function memory misreference vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A memory misreference vulnerability in the 'opjj2kwritemco' function in OpenJPEG's j2k.c file allows remote attackers to exploit the vulnerability to construct a malicious image that could be tricked into being parsed by the user, crashing the...

CVE-2016-4796

Heap-based buffer overflow in the colorcmyktorgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service crash via a crafted .j2k file...

OpenJPEG 'color_cmyk_to_rgb' function heap overflow vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability in OpenJPEG's colorcmyktorgb function allows remote attackers to construct specially crafted JPEG 2000 images for denial of service attacks or to remotely execute arbitrary code...

Vulnerabilities in the Google Chrome browser that allow a perpetrator to trigger a service failure or cause other effects

The multiple vulnerabilities of the opjj2kupdateimagedata function j2k.c in the OpenJPEG component, which is used in the Google Chrome browser’s PDFium engine, are caused by buffer overflows. Exploitation of these vulnerabilities could allow a malicious actor to cause a service failure memory spi...

OpenJPEG 'opj_tcd_init_tile' Function Denial of Service Vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability in the opjtcdinittile function of OpenJPEG allows remote attackers to construct specially crafted JPEG 2000 images for denial of service attacks...

OpenJPEG 'opj_pi_next_cprl' function denial of service vulnerability (CNVD-2016-05612)

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability in OpenJPEG's opjpinextcprl function line 526 of the pi.c file allows remote attackers to exploit the vulnerability to construct specially crafted JPEG 2000 images for denial of service attacks...

OpenJPEG 'opj_pi_next_cprl' Function Denial of Service Vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability in OpenJPEG's opjpinextcprl function line 523 of the pi.c file allows remote attackers to exploit the vulnerability to construct specially crafted JPEG 2000 images for denial of service attacks...

OpenJPEG Denial of Service Vulnerability (CNVD-2016-01725)

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability exists in the 'opjfree' function of OpenJPEG. An attacker can exploit this vulnerability to cause a denial of service double release or heap corruption with a specially crafted JPEG 2000 image...

OpenJPEG Denial of Service Vulnerability (CNVD-2016-01726)

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability exists in the 'opjtcdfreetile' function of OpenJPEG. The vulnerability can be exploited by an attacker to cause a denial of service out-of-bounds read with a specially crafted JPEG 2000 image...

OpenJPEG Denial of Service Vulnerability (CNVD-2016-01724)

OpenJPEG is a C-based open source JPEG 2000 codec . A security vulnerability exists in the 'sycc422torgb' function of OpenJPEG. An attacker can exploit this vulnerability to cause a denial of service read across boundaries with a specially crafted JPEG 2000 image...

CVE-2016-1645

Multiple integer signedness errors in the opjj2kupdateimagedata function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service incorrect cast and out-of-bounds write or possibly have unspecified other impact via crafted...

CVE-2016-1645

Multiple integer signedness errors in the opjj2kupdateimagedata function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service incorrect cast and out-of-bounds write or possibly have unspecified other impact via crafted...

Integer overflow

Multiple integer signedness errors in the opjj2kupdateimagedata function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service incorrect cast and out-of-bounds write or possibly have unspecified other impact via crafted...

UBUNTU-CVE-2016-1645

Multiple integer signedness errors in the opjj2kupdateimagedata function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service incorrect cast and out-of-bounds write or possibly have unspecified other impact via crafted...