CVE-2016-5158

Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in
OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows
and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause
a denial of service (heap-based buffer overflow) or possibly have
unspecified other impact via crafted JPEG 2000 data.

Bugs

• <https://crbug.com/628890&gt;